Security Operations Lead
Confirmed on the employer's own hiring board on Nov 13, 2026. First seen by Alion on Nov 11, 2026. CyberOne scores A on the Alion truth index.
“I am hugely excited about my future and the future of CyberOne. I have enjoyed my time here immensely and have learnt a huge amount in a short space of time, year-for-year I've learnt more here than I have at Microsoft and PwC.” - CyberOne Consultant
About CyberOne
CyberOne is a pure-play Microsoft security partner dedicated to helping enterprises realise the full value of the Microsoft Security portfolio-across Defender XDR, Sentinel, Entra, Purview, Intune, Copilot for Security and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance.
Job Title: Security Operations Lead
Location: Remote
Employment Type: Full-time
Reports to: Senior SecOps Lead
Schedule: Rotational Shift
The Role:
The SecOps Lead is responsible for the day-to-day operational management of the Security Operations Centre. The role ensures investigations are managed effectively, operational priorities are met, and analysts receive the technical guidance and support required to deliver high-quality security services. The SecOps Lead coordinates incident response activities, maintains service quality, and acts as the operational escalation point for the SOC.
Responsibilities
Coordinate daily SOC operations and manage analyst workloads.
Provide operational oversight of ongoing investigations and customer requests.
Review investigations to ensure quality, consistency, and adherence to established procedures.
Support analysts by providing technical guidance and removing operational blockers.
Coordinate response activities for high-priority and major incidents.
Act as the operational escalation point for customer incidents and service delivery matters.
Conduct monthly 1-2-1s, coaching and review of KPIs.
Monitor service performance against agreed service levels (SLAs).
Facilitate shift handovers and ensure continuity of investigations.
Promote knowledge sharing and continuous improvement across the SOC.
Support customer service reviews and operational meetings where required.