Senior Response Manager – Senior Technical Detection Analyst – Home Office Cyber Security Operations Centre

Overview

As a Senior Response Manager in the CSOC, you plan, implement and operate detection, containment and remediation capabilities to curb cyber threats. You work with cross-functional teams to enhance detection, response and automation, while coordinating readiness exercises and red team activity. You will guide security operations, improve monitoring practices and share best practices with product and service owners. This role offers impact on national digital security within a collaborative government environment and flexible working options.

Pay / Benefits

• Civil Service Pension with employer contribution
• 25 days annual leave, plus public holidays and additional privilege day
• In-year reward scheme for exceptional achievements
• Flexible working options with 60% office presence
• Non-contractual capability-based allowance consideration
• Holiday and pension benefits aligned with Civil Service

Responsibilities

• Conduct security monitoring, detection and response following agreed standards and guide mitigation and risk reduction
• Identify and investigate indicators of malicious activity across networks, systems and applications to improve threat detection and incident response
• Triage security events and alerts, advising on monitoring improvements and security posture
• Support incident response activities including red teaming and threat hunting, and contribute to lessons learned and post-incident reviews
• Develop, review and enhance monitoring use cases and alert effectiveness across security technologies
• Define and improve processes, tooling and controls to identify emerging threats and implement mitigation strategies
• Drive service and process improvements using industry best practices and problem-solving to support operations

Key requirements

• Demonstrable experience in a SOC environment and investigations of malicious activity
• Experience developing, maintaining or improving SIEM monitoring and detection content using threat intelligence
• Strong verbal and written communication across diverse audiences
• Ability to build partnerships across the organization and manage cross-functional stakeholders
• Experience managing a team in a technical environment
• SFIA framework awareness and alignment to role requirements

• Effective communication
• Stakeholder management
• Team leadership
• SIEM monitoring and detection content development
• Threat intelligence integration into detection
• Incident response and red teaming

…