Practice Development & Leadership

• Mentor and coach junior and mid-level consultants - providing technical guidance, delivery feedback, and career support.
• Contribute to the development of LevelBlue service offerings, delivery methodologies, proposal templates, and internal knowledge assets.
• Maintain a current and evolving understanding of the threat landscape, emerging attack techniques, and relevant vendor platforms to inform client advisory and internal capability development.
• Represent LevelBlue's AIR practice at industry events, client briefings, and partner forums where appropriate.

Experience & Qualifications

Essential Experience

• 10+ years of hands-on experience in security consulting, managed security services, or SOC engineering, with a sustained track record in senior client-facing delivery roles.
• Demonstrated experience leading complex, multi-stakeholder security engagements at enterprise scale - from initial scoping through to operational handover.
• Deep domain expertise in one or more of the following, with working knowledge across all:
  • SIEM design, build, and operationalisation - Microsoft Sentinel and/or Splunk
  • Security Operations Centre (SOC) design, build, and transformation - including greenfield and transition engagements
  • Endpoint Detection & Response (EDR) - deployment, tuning, and integration into detection workflows
  • Managed Security Service integration - including service wrap, SIEM/EDR definition, and operational model development
• Proven ability to produce and own senior-level deliverables: HLDs, LLDs, SOWs, operational documentation, and executive-level presentations.
• Experience operating across both greenfield and existing-environment engagements in complex enterprise settings.
• Comfortable working autonomously, managing multiple concurrent engagements, and travelling to client sites as required.

Skills & Attributes

• Strong structured problem-solving capability - able to analyse complex security environments and translate findings into clear, actionable client guidance.
• Excellent written and verbal communication skills; able to calibrate messaging from board-level executive briefings through to hands-on technical workshops.
• Commercial acumen - able to scope engagements accurately, manage client expectations, and contribute to LevelBlue revenue growth without compromising delivery quality.
• High degree of self-direction and accountability; able to operate with minimal supervision while keeping leadership informed of risks and progress.
• Collaborative by nature - contributes to team culture, shares knowledge, and invests in the development of colleagues.

Certifications - Highly Desirable

Domain

• Microsoft Sentinel / Azure
  • SC-200 (Security Operations Analyst), AZ-500 (Azure Security Engineer)
• Splunk
  • Splunk Certified Architect or Splunk Enterprise Security Certified Admin

Desirable Certifications

• Security Management
  • CISSP, CISM, or CRISC
• Incident Response / Detection
  • GIAC: GCIH, GCIA, GSOM, or GCFE
• Service Management
  • ITIL 4 Foundation (beneficial for managed services engagements)

Vendor certifications from other relevant platforms (e.g. CrowdStrike, SentinelOne, Elastic) are also valued. Equivalent demonstrated experience will be considered in lieu of formal certification where substantiated by delivery track record.

Education

• A high school diploma or equivalent is required; a college or university degree is a plus.

Why Join LevelBlue?

At LevelBlue, you’re not just an employee—you’re part of a team making a real difference in the world of cybersecurity. We foster a culture of innovation and creativity where your contributions are valued, and you’ll have the support and resources to grow and thrive.

This role is open to candidates legally authorized to work in the UK. At LevelBlue, we support flexible work and bring people together in person for key moments based on role, team, and business needs.

LevelBlue is committed to a culture of respect, inclusion, and equal opportunity. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other status protected under applicable law.

To all agencies: Please do not contact LevelBlue employees outside of the Talent Acquisition team. LevelBlue’s policy is to only accept resumes from agencies through its approved agency process and with a valid agreement in place. Any resume submitted outside this process will be considered the property of LevelBlue, and no fee will be paid if a candidate is hired from such a submission.