Security Delivery Consultant

Job description

We are seeking a Security Operations Lead to oversee cybersecurity operations, threat detection, incident response, and security monitoring across enterprise environments. The role blends hands‑on technical expertise with team leadership, requiring active participation in security operations while guiding analysts, improving processes, and supporting cyber resilience initiatives. Responsibilities include developing and enhancing cybersecurity processes, partnering with SIEM engineers to refine detection rules, monitoring and analyzing security events, leading incident detection and response activities, managing EDR and NDR platforms, coordinating vendor support, producing threat intelligence reports, mentoring analysts, supporting on‑call and major incidents, tracking metrics, collaborating with engineering, infrastructure, risk and compliance teams, and driving continuous improvement of security operations maturity.

Requirements

• Bachelor's degree in Information Security, Computer Science, IT, Engineering or related field
• 4 to 8 years of experience in cybersecurity, security operations, monitoring, incident response or SOC environments
• experience with SIEM, EDR, NDR and threat detection technologies
• proven experience investigating security incidents and coordinating response
• experience leading security analysts, coordinating workstreams or mentoring junior team members
• experience supporting enterprise cybersecurity operations in medium to large environments
• strong knowledge of SOC processes and cybersecurity operations
• hands‑on experience with SIEM platforms and monitoring tools
• strong experience with EDR solutions
• experience with NDR technologies and network security monitoring
• knowledge of incident response methodologies and cyber threat investigation techniques
• familiarity with threat intelligence and hunting processes
• strong understanding of security event analysis, attack techniques and detection engineering
• experience creating and tuning detection rules
• knowledge of security frameworks and industry best practices
• strong analytical and problem‑solving skills
• excellent written and verbal communication skills
• preferred certifications: CompTIA Security+
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Intrusion Analyst (GCIA)
• Certified SOC Analyst (CSA)
• CISSP
• CISM
• Microsoft Security certifications
• Splunk, Microsoft Sentinel, QRadar or equivalent SIEM certifications.

Skills