Security Operations Specialist ( L3 )

This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. This is a 1 year FTC role with high potential to extend.

Client Details

Our client is a well-established and respected professional services organisation with a strong national presence and a reputation for delivering high-quality solutions to a broad client base. With ongoing investment in technology and cybersecurity, they are committed to maintaining a secure and resilient environment that supports business growth, innovation, and operational excellence.

Description

• Investigating and responding to security incidents escalated through the Security Operations function.
• Performing detailed security event analysis and identifying potential threats or areas requiring further investigation.
• Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling.
• Supporting cyber incident response activities as a technical security specialist.
• Analysing security metrics and trends, providing recommendations to improve security controls and reduce risk.
• Delivering and managing security awareness initiatives, including phishing simulations and remediation activities.
• Maintaining and optimising security monitoring and protection platforms across the technology estate.
• Conducting security reviews of systems, infrastructure, and operational processes.
• Collaborating with technology and business teams to drive continuous security improvements.
• Ensuring security operations align with relevant regulatory, governance, and industry best practice requirements.
• Contributing to the development and implementation of operational security controls and procedures.

Profile

• Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment.
• Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline.
• Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies.
• Experience investigating security incidents and coordinating response activities.
• Knowledge of Security Information and Event Management (SIEM), Identity and Access Management (IAM), and Data Loss Prevention (DLP) technologies.
• Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices.
• Experience securing cloud-based and enterprise collaboration environments.
• Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK.
• Strong analytical and problem-solving skills with the ability to assess security risks effectively.
• A proactive approach to continuous learning and staying current with emerging threats and security trends.

Desirable

• Degree in Cyber Security, Information Technology, Computer Science, or a related discipline.
• Relevant industry certifications such as CISSP, GIAC, CompTIA Security+, SC-200, AZ-500, or equivalent.
• Experience working within regulated or enterprise-scale environments.

Job Offer

Private healthcare. Life assurance.

hybrid working in offices (Liverpool, Glasgow, London)

Ongoing training and professional development opportunities