Serco

6 days ago

Cyber Security Operations & CTI Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Provide senior, hands-on leadership across Security Operations and Cyber Threat Intelligence, shaping how Serco detects and responds to evolving threats. You’ll lead alert triage and complex investigations, build and integrate a new CTI capability into SOC workflows, and translate adversary TTPs into detection engineering. You’ll also drive hypothesis-led threat hunting, manage end-to-end incident response, maintain playbooks, and support an on-call rota as the team grows.

Location: United Kingdom

Workplace: Remote

Employment Type: Full time · Permanent

Job Function: Cybersecurity

Seniority: Manager level

Key Responsibilities

•Provide technical leadership across Security Operations, including alert triage, investigation, and escalation for complex cases.
•Design, build, and evolve a Cyber Threat Intelligence capability and integrate it into SOC workflows, detection logic, and incident response.
•Analyze and track threat actors and campaigns, mapping adversary TTPs to MITRE ATT&CK and improving detections based on intelligence.
•Develop, tune, and optimize detection rules using threat intelligence and incident learnings.
•Lead end-to-end cyber incidents, producing incident reports with root cause analysis and lessons learned; author and maintain response playbooks and SOC/CTI processes.

Pay and Benefits

Salary: GBP 77,000 - 90,000 annually

Perks:Health InsurancePensionCompany CarAnnual Bonus

Key Requirements

•7+ years’ experience in cyber security roles in-house or within an MSSP.
•Strong SOC experience, including end-to-end incident response.
•Proven experience building or integrating a Cyber Threat Intelligence function.
•Strong knowledge of SIEM, EDR, SOAR tooling and the MITRE ATT&CK framework.
•Demonstrated detection engineering and intelligence-led threat hunting experience.

Experience:7+ years

Skills:Technical communicationWorking under pressureIncident managementLeadershipStakeholder collaboration

Certifications:CISSPSEC503FOR572SC200Blue Team Level 2 (BTL2)

Tech Stack:SIEMEDRSOARMITRE ATT&CK

Eligibility

Security Clearance:BPSS

Company Brief

Serco

Provides public services across defence, transport, health, justice, immigration and citizen services, delivering operations, consultancy and managed services to governments and commercial clients worldwide.

Industry: Professional Services

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Hook, United Kingdom

Founded: 1929

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Serco

6 days ago

Cyber Security Operations & CTI Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Location: United Kingdom

Workplace: Remote

Employment Type: Full time · Permanent

Job Function: Cybersecurity

Seniority: Manager level

Key Responsibilities

•Provide technical leadership across Security Operations, including alert triage, investigation, and escalation for complex cases.
•Design, build, and evolve a Cyber Threat Intelligence capability and integrate it into SOC workflows, detection logic, and incident response.
•Analyze and track threat actors and campaigns, mapping adversary TTPs to MITRE ATT&CK and improving detections based on intelligence.
•Develop, tune, and optimize detection rules using threat intelligence and incident learnings.
•Lead end-to-end cyber incidents, producing incident reports with root cause analysis and lessons learned; author and maintain response playbooks and SOC/CTI processes.

Pay and Benefits

Salary: GBP 77,000 - 90,000 annually

Perks:Health InsurancePensionCompany CarAnnual Bonus

Key Requirements

•7+ years’ experience in cyber security roles in-house or within an MSSP.
•Strong SOC experience, including end-to-end incident response.
•Proven experience building or integrating a Cyber Threat Intelligence function.
•Strong knowledge of SIEM, EDR, SOAR tooling and the MITRE ATT&CK framework.
•Demonstrated detection engineering and intelligence-led threat hunting experience.

Experience:7+ years

Skills:Technical communicationWorking under pressureIncident managementLeadershipStakeholder collaboration

Certifications:CISSPSEC503FOR572SC200Blue Team Level 2 (BTL2)

Tech Stack:SIEMEDRSOARMITRE ATT&CK

Eligibility

Security Clearance:BPSS

Company Brief

Serco

Industry: Professional Services

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Hook, United Kingdom

Founded: 1929

Website LinkedIn