Cybersecurity Engineering & Operations Manager

We are seeking a Cybersecurity Engineering & Operations Manager to engineer, optimise, and continuously improve the organisation's cybersecurity controls and tooling. Reporting to the Director of Cybersecurity, this role will lead the design, implementation, and operation of security controls that protect corporate and cloud environments against evolving threats.

This is a hands-on managerial role combining security engineering leadership with technical depth across detection engineering, cloud and platform security, vulnerability management, and security tooling. The Cybersecurity Engineering & Operations Manager will own the effectiveness of the organisation's security controls and tooling stack, working closely with IT and Engineering teams to embed security into systems, improve detection and response capability, and ensure controls are measurable, scalable, and aligned to business risk.

Key Responsibilities

Security Engineering & Tooling

Own and optimise security tooling across SIEM, EDR, corporate and Cloud security, and vulnerability platforms

Ensure tooling is configured, integrated, optimised and delivering measurable value

Identify gaps and drive improvements in coverage and effectiveness

Work with IT and Digital Services teams to embed security into their systems and workflows

Incident Response & Security Operations

Provide oversight of monitoring and incident response capability

Support high-severity incident response where required

Ensure processes and playbooks are effective and up to date

Drive improvements based on lessons learned

Security Monitoring and Detection

Improve visibility across cloud, endpoint, and network environments

Design and improve security monitoring and detection logic

Tune alerts to reduce false positives and improve signal quality

Align detection capability with real-world threats

Drive automation across monitoring, detection and response

Cloud Security

Support secure configuration and hardening across cloud environments (M365/Azure/AWS)

Work with IT and Digital Services teams to reduce exposure across systems

Contribute to cloud security posture reviews and improvement initiatives

Monitor and respond to cloud-specific risks, misconfigurations, and policy drift

Endpoint Security & Hardening

Support secure configuration and hardening of corporate endpoints across Windows and Mac environments

Work with IT teams to maintain and improve endpoint security baselines and compliance

Monitor endpoint security posture and identify configuration drift or coverage gaps

Vulnerability & Exposure Management

Own and improve the vulnerability management lifecycle

Ensure effective prioritisation and remediation of risks

Provide clear visibility of exposure across systems

Metrics, Reporting & Continuous Improvement

Report operational security posture, incidents, and trends to the Director of Cybersecurity and key stakeholders.

Contribute to improving security maturity and track progress against improvement roadmaps.

Continuously improve processes, tooling, and team capability based on data and lessons learned.