Northrop Grumman UK
CSOC Lead
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
EMEA CSOC Lead
Location: Cheltenham (hybrid, 3 days onsite)
Clearance Type: Must hold or be able to obtain and maintain the highest levels of UK Security Clearance
Salary: £52,000 - £77,000
What's your possible?
At Northrop Grumman UK, you are part of a team driving innovation where it matters most, solving tomorrow's challenges and shaping the technology solutions of the future. We call it Defining Possible.
This mindset goes beyond our customer solutions. It is the foundation for your career development and the impact we have within the community.
This is more than just a job. It's a mission.
We are looking for an experienced cyber defender and people leader to lead our EMEA Cyber Security Operations Centre (CSOC) team from Cheltenham.
This is a rare opportunity to combine technical cyber expertise with leadership responsibility. You'll lead a team of highly capable cyber threat analysts protecting Northrop Grumman UK and EMEA operations, while remaining directly involved in threat hunting, incident response, digital forensics and cyber defence activities.
Working as part of a global cybersecurity organisation, you will collaborate closely with colleagues across the UK, Europe and the United States, helping shape cyber defence strategy and continuously advancing our ability to identify, investigate and respond to emerging threats.
If you're motivated by protecting critical business operations, influencing cyber strategy and leading talented security professionals, this role offers the opportunity to make a meaningful impact every day.
What You'll Do
As CSOC Lead, you will:
- Lead, mentor and develop a team of cyber threat analysts, providing direction, coaching and day-to-day operational oversight.
- Manage security operations across the EMEA region, ensuring effective execution of cyber monitoring, triage, investigation and response activities.
- Serve as Incident Response Lead for major cyber security events, coordinating technical investigations, containment and remediation activities.
- Lead advanced threat hunting and digital forensic investigations using SIEM, EDR, network telemetry and threat intelligence sources.
- Work closely with global CSOC teams to improve cyber defence capabilities, operational processes and detection methodologies.
- Provide clear and actionable cyber risk updates, technical briefings and executive summaries to senior stakeholders and leadership teams.
- Represent Northrop Grumman UK within government, industry and security forums, supporting collaboration and information sharing.
- Drive cyber resilience through exercises, lessons learned activities and continuous improvement initiatives.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What We're Looking For
Essential Experience
- Experience leading or managing a Security Operations Centre (SOC) or Cyber Security Operations Centre (CSOC).
- Proven success leading teams, projects or operational cyber security functions.
- Strong incident response, cyber threat hunting and digital forensics expertise.
- Experience using commercial SIEM, EDR and network analysis platforms.
- Strong understanding of network protocols and traffic analysis across the OSI model.
- Experience working with cyber threat intelligence methodologies and frameworks.
- Ability to communicate complex technical issues clearly to executive and non-technical audiences.
- Strong stakeholder management, decision-making and problem-solving skills.
- Proficiency across Windows, Linux and Unix environments, including PowerShell and Bash scripting.
Desirable Experience
- Existing trusted relationship with the UK National Cyber Security Centre (NCSC).
- Experience operating within highly regulated, defence or high-classification environments.
- Familiarity with NCSC CAF, DEFSTAN, DCC and similar national security frameworks.
- Experience assessing and responding to sophisticated nation-state and cyber espionage activity.
- Relevant technical certifications such as GCIH, GCIA, GCFA, CEH or equivalent.
- Bachelor's degree or higher in Cyber Security, Computer Science or a related discipline.
- Most importantly, we're looking for a leader who is passionate about cyber defence, motivated by continuous improvement and committed to developing both people and capability in an ever-evolving threat landscape.
- Even if you don't meet every requirement, we encourage you to apply. Your experience, potential and perspective could make you an excellent addition to our team.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Security Clearance
Due to the nature of our work, you must be a UK national and able to gain and maintain UK Government security clearance in line with the job role and requirements.
Our recruitment team is on hand to answer any questions and will guide you through the process: talentenquiries@uk.ngc.com
Benefits
We offer a flexible and rewarding benefits package designed to support your wellbeing, career and lifestyle, including:
- Flexible working options, including hybrid arrangements and compressed fortnights with every other Friday off
- Private healthcare, dental cover, life assurance and pension
- Flexible benefits package including critical illness cover and health cash plan
- Holiday buy and sell scheme
- Career development and learning programmes
- Annual performance incentive programme
Why Join Northrop Grumman UK?
A Mission to Believe In
Every day we contribute to building a more secure and connected world. You'll work alongside some of the best cyber security professionals in the industry, defending critical technologies and supporting missions that matter.
You'll also have opportunities to engage with employee networks, STEM programmes and community initiatives that make a positive impact beyond the workplace.
A Place to Belong and Thrive
We know that innovation comes from diverse experiences, perspectives and backgrounds. Every voice matters, and we're committed to creating an environment where everyone can contribute, grow and succeed.
Your Career, Your Way
Whether your ambition is to deepen your technical expertise, develop as a leader or influence cyber security strategy on a global scale, we'll provide the support, mentoring and development opportunities to help you achieve your goals.
Ready to Apply?
- Yes – Submit your application online.
- Possibly – Reach out to our team for more information: talentenquiries@uk.ngc.com
- No – Explore other opportunities with us. We're growing across the UK and are always looking for talented individuals ready to help define what's possible.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills