Threat Detection & Response Lead

At Atech (part of the Iomart Group), we're a leading managed services and cybersecurity provider, helping organisations stay secure, resilient and one step ahead of emerging threats.

In this role, you'll be:

• Leading and evolving our Threat Detection & Response capability, helping shape the future of our SOC services.
• Taking the lead during major cyber incidents, providing technical direction and driving investigations to resolution.
• Owning our threat intelligence programme, turning emerging threats into actionable security insights.
• Driving detection engineering, improving our ability to identify and respond to threats across customer environments.
• Overseeing vulnerability management, ensuring customers receive clear, practical remediation guidance.
• Acting as the go-to technical escalation point for complex investigations, threat hunts and security events.
• Leading proactive threat hunting activities to uncover risks before they become incidents.
• Reviewing and approving key changes within the Threat Detection & Response service.
• Working closely with customers during high-profile security events and escalations.
• Coaching and developing senior analysts, helping build a high-performing and technically excellent team.
• Improving processes, standards and investigation methodologies to strengthen service maturity.
• Contributing cybersecurity expertise, threat intelligence and strategic insight across the wider Cyber Practice.
• Supporting hiring, onboarding and development initiatives as the team continues to grow.

This is a hands-on leadership role for a cyber security expert who enjoys solving complex threats, mentoring others, and shaping cutting-edge detection and response services.

• Have significant hands-on experience with Microsoft Sentinel, Microsoft Defender XDR and Microsoft Entra in an enterprise, MSSP or MDR environment.
• Have a proven track record of threat hunting, detection engineering and incident response
  , including investigating complex attacks and developing high-quality detections.
• Can demonstrate experience leading or coordinating major security incidents
  , providing clear direction while keeping stakeholders informed throughout.
• Have strong knowledge of threat intelligence, attack chain analysis and multi-telemetry correlation
  , using these to improve detection and response capabilities.
• Have experience overseeing or contributing to vulnerability management programmes
  , including risk prioritisation and remediation guidance.
• Can define and implement technical standards, processes and operational improvements that raise the maturity of a Security Operations function.
• Have experience managing, coaching and developing analysts or engineers, supporting career growth and building high-performing teams.
• Are comfortable engaging with senior stakeholders and can communicate security risks, incidents and recommendations clearly and confidently.
• Have experience working within a SOC, MDR or MSSP environment
  , with a strong understanding of modern threat detection and response practices.
• Can provide technical leadership on security tooling, detection strategies and service improvements, balancing operational effectiveness with business priorities.
• Build strong relationships with customers and internal stakeholders and can act as a trusted escalation point for complex security matters.
• Continuously look for opportunities to improve detection coverage, reduce response times and enhance overall security outcomes.

• Experience working across multi-cloud environments and security technologies beyond the Microsoft ecosystem.
• Advanced security training or certifications from providers such as SANS, ISC2, ISACA or CREST.
• Experience managing or overseeing an…