Introduction



Our client is one of the most recognised names in digital and technology consultancy. You'll be joining a team that's passionate about cyber security, comfortable working at pace, and focused on solving the toughest security challenges facing major organisations today.



The work spans detection and response, operating model design, SIEM and SOAR tooling, and everything in between. you'll need deep hands-on experience in security operations architecture, a solid grasp of architecture frameworks like TOGAF, and real-world exposure to SIEM and SOAR platforms.




Working Patterns and location - Hybrid - 2-3 days on site per week




Key responsibilities



• Design and continuously improve detection and response capabilities for clients.



• Define architectural blueprints to guide engineers on implementation and tooling.



• Lead threat detection and response strategies, deciding the best course of action against threats.



• Develop processes, governance and ways of working to support the target operating model.



• Collaborate with Engineers and Threat Hunters to analyse dashboard data and drive continuous improvement.



• Lead migration and implementation strategies and plans for security solutions.



• Research emerging tools and approaches to keep detection and response capabilities cutting edge.



• Support clients in evolving their security operating models and refining tooling selection.




Skills & experience



• Strong experience in Security Operations architecture and detection and response design.



• Solid understanding of Security Operations Centres and working within or alongside a SOC.



• Experience producing High Level Design and Low Level Design documentation for security solutions.



• Experience working with architecture frameworks, ideally TOGAF.



• Hands-on experience with multiple SIEM and SOAR platforms, preferably Google SecOps.



• Experience with EDR, XDR and NDR tooling such as CrowdStrike, Corelight or Microsoft Defender XDR.



• Experience working across hyperscaler cloud environments.



• Strong written, verbal and presentation skills - comfortable engaging from end users to board level.




The client would also like to see some of the below, but this is not essential:



• Experience working within Agile, DevOps or Kanban delivery environments.



• Professional Cloud Architect Certification from a major hyperscaler provider.



• Experience in a consultancy or client-facing advisory environment.



• Relevant cyber security qualifications such as CISSP, CISM or equivalent.




Additional benefits



• 26 days Annual Leave plus Bank Holidays.



• Pension contribution matched up to 8%.



• Private Medical Insurance.



• Overseas Working Policy - If you have the right to work in another country, can request up to 20 days each year to work remotely.



• Yearly On Target Bonus.



• Season Ticket Loans.



• Paid professional subscription.



• Life Assurance.




Our client is committed to providing a diverse and inclusive workplace and welcomes applications from all backgrounds.




Part-time opportunities/flexible working is available to suit individual needs.




RECOMMEND A FRIEND: If you have professional friends/colleagues who would be interested in one of our roles and our excellent levels of service too, we'd like to recognise your recommendations with a 'thank you' of our own. For every friend you refer who then starts a role through Datasource either Contract or Permanent, we will send you £200 of Love to Shop Gift Vouchers & gift your friend £100 in Love to Shop Gift Vouchers as well!



You will be required to hold a minimum of SC Clearance. If you do not hold an active SC Clearance, please familiarise yourself with the vetting process before applying.



(c) Copyright Datasource Computer Employment Limited 2026.