Security Operations Lead

Overview

In this role you lead the Security Operations function within a cross‑functional Platform & Security Engineering organization. You own and grow the ops team across the UK and Australia, handling major incidents and maturing processes for an AI‑enabled business. You will shape detection, tooling, and incident response while collaborating with engineering, product, and compliance to meet regulatory and contractual obligations. This is a chance to drive security excellence at scale in a fast‑growing energy tech company.

Pay / Benefits

• 26 days holiday
• private medical insurance
• pension scheme
• discretionary bonus
• Flex Fund 5% of salary
• home office budget

Responsibilities

• Lead and mentor Security Operations across multiple geographies, fostering learning, ownership, and psychological safety
• Evolve incident response processes, especially around AI, maintain playbooks and run exercises
• Proactively hunt threats and collaborate with testers and bug bounty programs to close gaps
• Own detection and tooling, including SIEM, EDR, and threat intelligence platforms, and drive automation
• Define and report Security Operations KPIs and KRIs to senior stakeholders
• Support compliance and governance, contributing to audits, assessments, and customer security reviews

Key requirements

• Experience managing and mentoring engineers and/or operations specialists
• Hands-on incident response leadership in major incidents
• Experience in threat intelligence and hunting in complex, cloud-native environments
• Understanding of adversarial techniques (MITRE ATT&CK and similar)
• Curiosity about security risks of AI systems (model abuse, prompt injection, data exfiltration)
• Familiarity with modern security operations tooling
• Experience automating repeatable processes

• Proven leadership across multiple geographies and time zones
• Calm, composed, and decisive under pressure
• Clear risk communication to engineers and executives
• Incident management
• Threat intelligence and hunting
• Security operations tooling (SIEM, EDR, threat intelligence platforms)

…