Introduction

Our client is one of the most recognised names in digital and technology consultancy - a firm operating at serious scale, with a cyber practice of over 450 specialists in the UK alone, sitting inside a Technology and Transformation business of 7,500 people. You'll be joining a team that's passionate about cyber security, comfortable working at pace, and focused on solving the toughest security challenges facing major organisations today.

The work spans Next-Gen Detection and Response, operating model design, SIEM and SOAR tooling, and everything in between. you'll need deep hands-on experience in security operations architecture, a solid grasp of architecture frameworks like TOGAF, and real-world exposure to SIEM and SOAR platforms.

Working Patterns and location - Hybrid - 2-3 days on site per week

Key responsibilities

• Design and continuously improve Next-Gen Detection and Response capabilities for clients.

• Define architectural blueprints to guide engineers on implementation and tooling.

• Lead threat detection and response strategies, deciding the best course of action against threats.

• Develop processes, governance and ways of working to support the target operating model.

• Collaborate with Engineers and Threat Hunters to analyse dashboard data and drive continuous improvement.

• Lead migration and implementation strategies and plans for security solutions.

• Research emerging tools and approaches to keep detection and response capabilities cutting edge.

• Support clients in evolving their security operating models and refining tooling selection.

Skills & experience

• Strong experience in Security Operations architecture and Next-Gen Detection and Response design.

• Solid understanding of Security Operations Centres and working within or alongside a SOC.

• Experience producing High Level Design and Low Level Design documentation for security solutions.

• Experience working with architecture frameworks, ideally TOGAF.

• Hands-on experience with multiple SIEM and SOAR platforms, preferably Google SecOps.

• Experience with EDR, XDR and NDR tooling such as CrowdStrike, Corelight or Microsoft Defender XDR.

• Experience working across hyperscaler cloud environments.

• Strong written, verbal and presentation skills - comfortable engaging from end users to board level.

The client would also like to see some of the below, but this is not essential:

• Experience working within Agile, DevOps or Kanban delivery environments.

• Professional Cloud Architect Certification from a major hyperscaler provider.

• Experience in a consultancy or client-facing advisory environment.

• Relevant cyber security qualifications such as CISSP, CISM or equivalent.

Additional benefits

• 26 days Annual Leave plus Bank Holidays.

• Pension contribution matched up to 8%.

• Private Medical Insurance.

• Overseas Working Policy - If you have the right to work in another country, can request up to 20 days each year to work remotely.

• Yearly On Target Bonus.

• Season Ticket Loans.

• Paid professional subscription.

• Life Assurance.

Our client is committed to providing a diverse and inclusive workplace and welcomes applications from all backgrounds.

Part-time opportunities/flexible working is available to suit individual needs.

RECOMMEND A FRIEND: If you have professional friends/colleagues who would be interested in one of our roles and our excellent levels of service too, we'd like to recognise your recommendations with a 'thank you' of our own. For every friend you refer who then starts a role through Datasource either Contract or Permanent, we will send you £200 of Love to Shop Gift Vouchers & gift your friend £100 in Love to Shop Gift Vouchers as well!

You will be required to hold a minimum of SC Clearance. If you do not hold an active SC Clearance, please familiarise yourself with the vetting process before applying.

(c) Copyright Datasource Computer Employment Limited 2026.