Security Operations Lead

Security Operations Lead - London - Insurance - Hybrid

Employment Type: Permanent

Location: Hybrid - London, 3x per week

Salary: £95,000 - £115,000 pa + Bonus/Benefits

Client:

A highly regulated financial services organisation operating in the insurance sector, with a growing technology footprint & a strong focus on cyber resilience. The business operates in a complex, always-on environment & is investing in modern security tooling, automation, & proactive threat prevention as part of a broader transformation.

This is a hands‑on Security Operations Lead role responsible for leading day‑to‑day security operations while owning & evolving the organisation's core security tooling. Sitting between IT leadership & a centralised security function, the role manages a small team of L1/L2 analysts & acts as the technical escalation point above a 24/7 managed SOC. The focus is on prevention, detection quality, & continuous capability improvement rather than reactive alert handling.

You will act as a Senior Engineer as well as management of a small team, therefore you will demonstrate the ability & willingness to get involved in both.

• Lead & develop a small team of Security Operations analysts, providing technical guidance, mentoring, & day‑to‑day operational leadership
• Own & continuously improve the organisation's security tooling, including EDR, SIEM, web proxy/zero trust, & email security platforms
• Act as the internal escalation point for security incidents raised by the managed SOC, leading investigations & response activities
• Build & refine SIEM use cases, detection rules, dashboards, & automation to improve signal quality & reduce noise
• Manage the relationship with the managed security service provider, ensuring effective escalation, clear accountability, & value delivery
• Drive a prevention‑led security posture by identifying control gaps & implementing improvements aligned to real‑world threat activity
• Engage with technology & business stakeholders to ensure security controls support operational needs in a regulated environment

• Strong hands‑on experience in a Security Operations or Security Engineering role, with some responsibility for managing or leading others
• Deep practical knowledge of modern security tooling, including EDR platforms (e.g. Crowd Strike, Carbon Black), SIEM, & email security
• Experience working alongside a managed SOC or MSSP, including handling escalations & improving detection & response processes
• Ability to translate threat intelligence & frameworks such as MITRE ATT&CK into pragmatic, effective operational controls
• Experience in regulated environments such as financial services, insurance, banking, or similar
• Exposure to zero trust, web proxy, or secure access technologies

This role is suited to candidates who enjoy being technically involved while still leading & developing others. It will appeal to Security Operations Managers or senior SOC engineers ready to step into a broader ownership & leadership position.

Please forward your profile for an immedaite review.

We process personal data submitted as part of your application for recruitment purposes in line with UK GDPR. All applications are reviewed by a member of our team, we do not use automated decision‑making in our selection process.

Your application will be assessed against the requirements of this role.

For more information on how we use your data, including how long we retain it & your rights, please refer to our Privacy Policy :