Director - cyber defence operations

Director - cyber defence operations

Full-Time 90000 - 120000 £ / year (est.) No working from home possible
myGwork - LGBTQ+ Business Community

At a Glance

  • Tasks: Lead and inspire a high-performing cybersecurity team to transform our global Security Operations Center.
  • Company: Join Colt Technology Services, an inclusive employer committed to diversity and innovation.
  • Benefits: Enjoy flexible working hours, extensive training, and a supportive work environment.
  • Other info: Be part of a global network that values diversity and empowers its people.
  • Why this job: Make a real impact in cyber defence and help shape the future of digital security.
  • Qualifications: 8+ years in cybersecurity with leadership experience and strong technical expertise.

The predicted salary is between 90000 - 120000 £ per year.

Overview

This job is with Colt Technology Services, an inclusive employer. Colt provides network, voice and data centre services to thousands of businesses around the world, allowing them to focus on delivering their business goals instead of the underlying infrastructure.

Why we need this role

We’re looking for a visionary cybersecurity leader to drive the transformation of our global Security Operations Center. Reporting to the Chief Security Officer, you will architect and scale a next-generation SOC — advancing incident response, integrating cutting-edge threat intelligence, and strengthening the systems that protect and sustain our digital operations. This is an opportunity to build something exceptional and lead a team that redefines how we approach cyber defence and resilience.

What you will do

  • Leadership & Strategy
    • Lead, develop, and inspire a high-performing team of SOC analysts and engineers.
    • Define and implement cyber defence strategies aligned with business priorities and risk posture.
    • Act as the senior escalation point for complex security incidents and coordinate cross-functional responses.
  • Threat and Vulnerability Management
    • Integrate advanced threat intelligence into detection and response workflows to identify emerging threats proactively.
    • Develop an automated, risk-based vulnerability management programme to reduce attack surface.
    • Collaborate with intelligence-sharing communities to enhance situational awareness.
    • Translate threat intelligence into actionable security measures for stakeholders.
  • Incident Detection & Response
    • Oversee monitoring and analysis of network traffic, IDS alerts, and security logs.
    • Ensure accurate prioritisation and build high-fidelity alerting.
    • Lead escalation and resolution efforts across internal and external partners.
    • Build a proactive threat-hunting capability and partner with industry experts.
  • Continuous Improvement
    • Enhance security monitoring tools, processes, and detection logic.
    • Stay ahead of current vulnerabilities, attack techniques, and countermeasures.
    • Ensure thorough documentation of cases, procedures, and investigations.

What we’re looking for

  • Technical Expertise
    • Deep understanding of security operations, threat intelligence and incident response frameworks.
    • Knowledge of intrusion detection, operating systems (Windows/UNIX), web technologies and telco networks.
    • Hands-on experience developing custom detections and leading threat hunting.
    • Familiarity with cloud security operations and automation/orchestration.
    • Scripting experience (Python, PowerShell, Node.js, JavaScript) is highly desirable.
    • Telecoms experience is a strong advantage.
  • Leadership Skills
    • Excellent communication skills with the ability to simplify complex concepts.
    • Proven experience leading global teams and making decisions in high-ambiguity environments.
    • Strong analytical and problem-solving skills for complex security challenges.
    • Ability to build strong, collaborative relationships across a global organisation.
    • A growth mindset — resilient, curious, and solutions-oriented.

Preferred Experience

  • 8+ years in cybersecurity operations, with at least 3 in a leadership role.
  • Experience integrating threat intelligence into SOC workflows.
  • Certifications such as CISSP, GIAC or equivalent are a plus.

What we offer you

At Colt, you’ll make a difference. We empower people and employ those we trust, who come together across the globe to create intelligent solutions. Our global teams are full of ambitious, driven people, all working together towards one shared purpose: to put the power of the digital universe in the hands of our customers wherever, whenever and however they want. We give our people the opportunity to inspire and lead teams, and work on projects that connect people, cities, businesses, and ideas. We want you to help us change the world, for the better.

Diversity and inclusion

Inclusion and valuing diversity of thought and experience are at the heart of our culture here at Colt. From day one, you’ll be encouraged to be yourself because we believe that’s what helps our people to thrive. We welcome people with diverse backgrounds and experiences, regardless of their gender identity or expression, sexual orientation, race, religion, disability, neurodiversity, age, marital status, pregnancy status, or place of birth.

Benefits

  • Flexible working hours and the option to work from home.
  • Extensive induction program with experienced mentors and buddies.
  • Opportunities for further development and educational opportunities.
  • Global Family Leave Policy.
  • Employee Assistance Program.
  • Internal inclusion & diversity employee networks.

A global network

When you join Colt you become part of our global network. We are proud of our colleagues and the stories and experience they bring.

Director - cyber defence operations employer: myGwork - LGBTQ+ Business Community

Colt Technology Services is an exceptional employer that champions inclusivity and diversity, fostering a vibrant work culture where every employee is empowered to thrive. With flexible working arrangements, extensive development opportunities, and a commitment to mental health support, Colt provides a dynamic environment for cybersecurity professionals to lead transformative projects in a global context. Join us to make a meaningful impact while collaborating with ambitious teams dedicated to redefining the future of digital security.

myGwork - LGBTQ+ Business Community

Contact Details:

myGwork - LGBTQ+ Business Community Recruitment Team

StudySmarter Expert Advice🤫

We think this is how you could land Director - cyber defence operations

Tip Number 1

Network like a pro! Connect with industry professionals on LinkedIn and attend cybersecurity events. You never know who might have the inside scoop on job openings or can refer you directly to hiring managers.

Tip Number 2

Show off your skills! Create a portfolio showcasing your projects, especially those related to threat intelligence and incident response. This will give potential employers a taste of what you can bring to their team.

Tip Number 3

Prepare for interviews by brushing up on common cybersecurity scenarios. Be ready to discuss how you've handled complex security incidents in the past and how you would approach challenges in a leadership role.

Tip Number 4

Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you’re genuinely interested in joining our team at Colt.

We think you need these skills to ace Director - cyber defence operations

Cybersecurity Leadership
Security Operations Management
Incident Response Frameworks
Threat Intelligence Integration
Vulnerability Management
Network Traffic Analysis
Intrusion Detection Systems (IDS)

Some tips for your application 🫡

Tailor Your Application:Make sure to customise your CV and cover letter to highlight your experience in cybersecurity operations and leadership. We want to see how your skills align with the role of Director - Cyber Defence Operations, so don’t hold back on showcasing your relevant achievements!

Showcase Your Technical Expertise:Don’t forget to mention your hands-on experience with security operations, threat intelligence, and incident response frameworks. We’re looking for someone who can hit the ground running, so let us know about your scripting skills and any telecoms experience you have!

Communicate Clearly:Use clear and concise language in your application. We appreciate excellent communication skills, especially when it comes to simplifying complex concepts. Make it easy for us to understand your journey and how you can lead our SOC team.

Apply Through Our Website:We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for this exciting opportunity. Plus, it shows you’re keen to join our Colt family!

How to prepare for a job interview at myGwork - LGBTQ+ Business Community

Know Your Cybersecurity Stuff

Make sure you brush up on your knowledge of security operations, threat intelligence, and incident response frameworks. Be ready to discuss specific tools and techniques you've used in the past, especially around intrusion detection and cloud security. This will show that you're not just a leader but also technically savvy.

Showcase Your Leadership Skills

Prepare examples of how you've led teams through complex security incidents or high-pressure situations. Colt is looking for someone who can inspire and develop a high-performing team, so be ready to share your leadership philosophy and how you've built collaborative relationships in previous roles.

Be Ready for Scenario Questions

Expect to face scenario-based questions that test your problem-solving skills. Think about how you would handle specific security incidents or integrate threat intelligence into workflows. Practising these scenarios can help you articulate your thought process clearly during the interview.

Emphasise Continuous Improvement

Colt values innovation and improvement, so be prepared to discuss how you've enhanced security processes or tools in your previous roles. Share any experiences where you've stayed ahead of vulnerabilities and attack techniques, and how you documented your findings to improve future responses.