Security Operations Consultant

We believe in the power of ingenuity to build a positive human future.

As strategies, technologies, and innovation collide, we create opportunity from complexity.

Our teams of interdisciplinary experts combine innovative thinking and breakthrough technologies to progress further, faster. Our clients adapt and transform, and together we achieve enduring results.

We are over 4,000 strategists, innovators, designers, consultants, digital experts, scientists, engineers, and technologists. And we have deep expertise in consumer and manufacturing, defence and security, energy and utilities, financial services, government and public services, health and life sciences, and transport.

Our teams operate globally from offices across the UK, Ireland, US, Nordics, and Netherlands.

We are looking for a Security Operations Manager to join our Digital Trust & Cyber Security practice. Working on behalf of our clients, you will lead Security Operations Centre (SOC) analysts and incident response specialists.

You will combine hands-on operational leadership with advisory work. This means managing live incident containment and day-to-day SOC operations, while helping enterprise and public sector clients modernise their security operations, improve their SIEM, SOAR and EDR capabilities, and build stronger cyber resilience.

• Join our Digital & Data team and work alongside cyber security, product, design and technology specialists in cross-disciplinary teams to solve complex client challenges and bring ideas to life.
• Build a flexible and distinctive career in a trust-based, inclusive environment that values excellence, innovation and curiosity. You can progress through a technical career track without needing to follow the Partner career track if that does not align with your ambitions.
• Work across a broad range of Security Operations engagements, client environments and technology stacks spanning seven sectors. No two projects are the same.
• Join a supportive and collaborative cyber and technology community, with knowledge sharing, peer support, coaching and mentoring from other specialists.
• Deepen your expertise through our culture of learning and growth, with access to a development budget for technical and non-technical training and professional certifications.
• Benefit from a hybrid working approach, with an expectation of being in the office or on a client site for a minimum of two days per week, depending on the role and assignment.

What you'll do

• Lead and develop SOC analysts and incident response specialists, providing clear operational direction, coaching and support across day-to-day security operations.
• Take a hands-on leadership role during cyber security incidents, coordinating investigation, containment, eradication, recovery, stakeholder communications and post-incident reviews.
• Help enterprise and public sector clients assess and improve their Security Operations capabilities, identifying gaps across people, processes and technology and translating these into practical improvements.
• Advise on the evolution and optimisation of SIEM, SOAR, EDR and threat-detection tooling to improve visibility, reduce noise and strengthen detection and response capabilities.
• Develop and maintain incident playbooks, standard operating procedures, automated response workflows and proactive tabletop exercises.
• Support the development of modern Security Operations services and ways of working, sharing your expertise across our Digital Trust & Cyber Security community through coaching, mentoring and knowledge sharing.

Security technologies you'll work with

We advocate using the right technology for the right task. Depending on the client environment and engagement, you can expect to work…