Security Operations Lead

About CyberOne

“I am hugely excited about my future and the future of CyberOne.

I have enjoyed my time here immensely and have learnt a huge amount in a short space of time, year-for-year I've learnt more here than I have at Microsoft and PwC.” - CyberOne Consultant About CyberOne CyberOne is a pure-play Microsoft security partner dedicated to helping enterprises realise the full value of the Microsoft Security portfolio—across Defender XDR, Sentinel, Entra, Purview, Intune, Copilot for Security and more.

We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance.

Responsibilities

• Security Operations Lead Location: Remote Employment Type: Full-time Reports to: Senior SecOps Lead Schedule: Rotational Shift The Role: The SecOps Lead is responsible for the day-to-day operational management of the Security Operations Centre.
• The role ensures investigations are managed effectively, operational priorities are met, and analysts receive the technical guidance and support required to deliver high-quality security services.
• The SecOps Lead coordinates incident response activities, maintains service quality, and acts as the operational escalation point for the SOC.
• Coordinate daily SOC operations and manage analyst workloads.
• Provide operational oversight of ongoing investigations and customer requests.
• Review investigations to ensure quality, consistency, and adherence to established procedures.
• Support analysts by providing technical guidance and removing operational blockers.
• Coordinate response activities for high-priority and major incidents.
• Act as the operational escalation point for customer incidents and service delivery matters.
• Conduct monthly 1-2-1s, coaching and review of KPIs.
• Monitor service performance against agreed service levels (SLAs).
• Facilitate shift handovers and ensure continuity of investigations.
• Promote knowledge sharing and continuous improvement across the SOC.
• Support customer service reviews and operational meetings where required.