Find your next tech and IT Job or contract Governance in Scotland

On a typical day you will… Provide line management, coaching, and development to SOC analysts and engineers. Lead the configuration, tuning, and maintenance of core SOC capabilities including log aggregation, alerting, correlation, threat detection, and response tooling. Collaborate with cyber engineers to develop and automate detection logic and incident response playbooks. Work with our Technical Product Manager and Security Architect to ensure SOC capabilities align with enterprise security architecture and strategy. Develop and maintain scenario-based runbooks and technical procedures for incident response. Engage with project teams to provide security assurance for new and existing services. Drive continuous improvement in SOC operations, tooling, and team capability. Monitor and report on SOC performance, including: - SLA/OLA adherence and incident handling timelines - Volume and severity of security incidents - Average time to detect (MTTD) and respond (MTTR) to threats - Accuracy and relevance of alerts (e.g. reducing false alarms) - Coverage of threat detection across systems and services - Outcome-focused metrics such as reduced dwell time, successful containment rates, and measurable improvements in security posture