Cybersecurity Engineering & Operations Manager in London

We are seeking a Cybersecurity Engineering & Operations Manager to engineer, optimise, and continuously improve the organisation's cybersecurity controls and tooling. Reporting to the Director of Cybersecurity, this role will lead the design, implementation, and operation of security controls that protect corporate and cloud environments against evolving threats. This is a hands‑on managerial role combining security engineering leadership with technical depth across detection engineering, cloud and platform security, vulnerability management, and security tooling.

The Cybersecurity Engineering & Operations Manager will own the effectiveness of the organisation's security controls and tooling stack, working closely with IT and Engineering teams to embed security into systems, improve detection and response capability, and ensure controls are measurable, scalable, and aligned to business risk.

• Security Engineering & Tooling: Own and optimise security tooling across SIEM, EDR, corporate and cloud security, and vulnerability platforms. Ensure tooling is configured, integrated, optimised and delivering measurable value. Identify gaps and drive improvements in coverage and effectiveness. Work with IT and Digital Services teams to embed security into their systems and workflows.
• Incident Response & Security Operations: Provide oversight of monitoring and incident response capability. Support high‑severity incident response where required. Ensure processes and playbooks are effective and up to date. Drive improvements based on lessons learned.
• Security Monitoring and Detection: Improve visibility across cloud, endpoint, and network environments. Design and improve security monitoring and detection logic. Tune alerts to reduce false positives and improve signal quality. Align detection capability with real‑world threats. Drive automation across monitoring, detection and response.
• Cloud Security: Support secure configuration and hardening across cloud environments (M365/Azure/AWS). Work with IT and Digital Services teams to reduce exposure across systems. Contribute to cloud security posture reviews and improvement initiatives. Monitor and respond to cloud‑specific risks, misconfigurations, and policy drift.
• Endpoint Security & Hardening: Support secure configuration and hardening of corporate endpoints across Windows and Mac environments. Work with IT teams to maintain and improve endpoint security baselines and compliance. Monitor endpoint security posture and identify configuration drift or coverage gaps.
• Vulnerability & Exposure Management: Own and improve the vulnerability management lifecycle. Ensure effective prioritisation and remediation of risks. Provide clear visibility of exposure across systems.
• Metrics, Reporting & Continuous Improvement: Report operational security posture, incidents, and trends to the Director of Cybersecurity and key stakeholders. Contribute to improving security maturity and track progress against improvement roadmaps. Continuously improve processes, tooling, and team capability based on data and lessons learned.

Benefits: Competitive salaries. Comprehensive benefits package including company pension and excellent healthcare. Travel and life insurance. Structured career framework with regular reviews. 25 days annual leave plus additional flexible bank holidays. Flexible, agile and hybrid working with core hours.