Security Operations Lead

🕒 June 30

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟠 Senior

🛡️ Security Operations

🇬🇧 UK Skilled Worker Visa Sponsor

This company has sponsored UK Skilled Worker visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Digital Science

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2015

🔬 Science

📚 Education

🏢 Enterprise

Science • Education • Enterprise

Digital Science is a company dedicated to enhancing the research lifecycle through innovative technology solutions. They aim to make research processes more efficient, data more effective, and collaboration more seamless, thus driving progress in academic and industry settings. Their product portfolio includes services such as Altmetric, Dimensions, Figshare, Overleaf, and more, which support various research stages from data management to publication. They focus on advancing open and responsible research while maintaining partnerships across academic, governmental, and industrial sectors. Digital Science actively contributes to the evolution of open access and research integrity standards.

📋 Description

• Work with various stakeholders from across the group, to ensure security operations practices, policies, and systems are robust, pragmatic and aligned with strategic objectives. • Define, build, and maintain a comprehensive security operations architecture that addresses current and emerging threats. • Manage delivery of cyber security projects and co-ordinate business security initiatives to support the organisation’s security posture and strategic goals. • Provide expert consultancy to technology teams on both reactive (day-to-day issues) and proactive (strategic) security matters. • Maintain Security Operations documentation, records and evidence to support security assessments, audits, and compliance with legal, regulatory and customer requirements. • Oversee and enforce adherence to technical security policies, standards, best practices, and customer requirements. • Lead the monitoring, detection, and investigation of security events & alerts; maintain and improve security control automation, logging, alerting, vulnerability scanning and threat detection capabilities. • Own incident response procedures; coordinate incident handling, ensure relevant stakeholders and third parties are engaged, lead follow-up actions until resolution. • Manage and oversee security testing: internal automated technical controls capture and scans, third-party assessments, penetration tests, ensuring findings are tracked and remediated. • Ensure security controls and processes are integrated across systems, applications, and cloud infrastructure. • Develop KPIs, SLAs, dashboards to measure and report performance, including response times, false positives, remediation progress etc. • Stay up-to-date with regulatory/compliance frameworks (e.g. EU Cyber Resilience Act, EU AI Act, ISO 27001, GDPR, PCI-DSS, NIST,NCSC), threat landscape changes and emerging technologies. • Work across the organisation and beyond to promote best practice across Digital Science, making recommendations for improvements to cyber security practices in line with industry standards and learnings from security incidents. • Prepare cyber security responses and evidence for internal and external parties. • Take an active role in information security forums, councils and communities within and outside of the organisation.

🎯 Requirements

• You’re experienced with implementing and managing SIEM, SOAR, EDR/XDR, vulnerability scanners, DLP, firewalls, intrusion detection/prevention systems, data loss prevention etc. • You have knowledge of cloud platforms, virtualization, logging infrastructure etc and the ability to tune alerts, reduce noise, monitor logs, detect anomalies. • You are familiar with known frameworks like MITRE ATT&CK, OWASP, etc. • You are highly experienced with responding to security events/incidents, coordinating with stakeholders, executing post-incident reviews, documenting lessons learned. • You will have knowledge and experience of designing secure system architecture (networks, applications, identity and access), drafting and enforcing security policies and standards. • You will have experience with delivering security-related change programmes, procured or internal, managing 3rd parties or vendors; ability to scope, plan and track projects. • Relevant professional certifications. • Experience working in/with a 24/7 Security Operations Centre (SOC). • Experience integrating threat intelligence and/or using external sources of threat feeds. • Scripting or automation skills (Python, PowerShell, Terraform etc.) to automate repetitive tasks. • Prior experience where regulatory and customer trust are critical.

🏖️ Benefits

• We invest in, nurture and support innovative businesses and technologies that make all parts of the research process more open, efficient and effective. • We are brave in the pursuit of better. • We are collaborative and inclusive. • We are always open-minded. • We are from and for the community. • Equal opportunity employer.