Version 1
Security Operations – Technical Lead
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Company Description
Version 1 has celebrated 30 years in business and continues to be trusted by global brands to deliver technology and transformation solutions that drive customer success. Our deep expertise enables our customers to navigate the rapidly evolving technology landscape. We foster strong partnerships with global technology leaders including Microsoft, AWS, Oracle, Red Hat, OutSystems, Snowflake, ensuring that our customers are provided with the highest quality solutions and services.
We’re an award-winning employer reflecting how our employees are at the very heart of what we do:
- UK & Ireland's premier AWS, Microsoft & Oracle partner
- 3300+ strong, €350/£300m revenue business
- 10+ years as a Great Place to Work in Ireland & UK
- Best Workplace for Women in the UK & Ireland by GPTW
- Best Workplace for Wellbeing in the UK by GPTW
We’re a core values driven company, we hire people who share our values, and we reward those who display and foster them, it’s deeply embedded within our DNA. Invest in us and we’ll invest in you!
Job Description
A hands-on technical leader who owns the security operations function - threat detection, incident response, phishing response, vulnerability management, and identity and access management and the day-to-day defense of the organisation's systems and data.
Acts as the internal owner of security operations while coordinating with an outsourced/managed SOC provider and manages reporting on risk posture to leadership.
Responsibilities:
- Lead and coordinate security operations strategy; act as primary internal liaison with the managed SOC provider (escalations, tuning requests, SLA management)
- Own incident response end-to-end: detection, triage, containment, post-incident review whether initiated internally or escalated by the SOC provider
- Lead phishing detection and response: triage reported emails, coordinate takedowns, run awareness/simulation programs, and refine email security controls
- Build and tune detection rules and hunting queries in Microsoft Sentinel and Defender XDR using KQL
- Administer and optimize Microsoft Defender suite (Endpoint, Cloud, Identity, Office 365)
- Run vulnerability management lifecycle using Tenable for scanning and ServiceNow Vulnerability Response for remediation tracking and SLAs
- Manage Palo Alto firewall policies, rule hygiene, and log integration
- Oversee EDR/NDR coverage and correlate alerts across endpoint and network telemetry
- Write and maintain PowerShell scripts/automation for response actions and operational efficiency
- Coordinate with IT, engineering, and compliance on audits, controls, and architecture reviews
- Report metrics, incident summaries, and risk posture to leadership
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Qualifications
Required Skills
- Strong grounding in security operations - SIEM platforms (Sentinel), EDR/XDR (Defender), and SOAR tooling
- KQL skills for Sentinel analytics, hunting, and workbooks
- Microsoft Defender suite (XDR, endpoint, identity, cloud) administration
- Phishing analysis and response (headers, URLs, attachments) and email security tooling
- Identity and access management - Entra ID (Azure AD), conditional access, MFA, PIM, identity governance
- Vulnerability management tools (Tenable, Defender)
- ServiceNow Vulnerability Response for workflow
- PowerShell scripting for automation and incident response actions
- NDR concepts and cross-telemetry correlation
- Experience managing/coordinating a third-party or outsourced SOC
- Incident response methodology (NIST 800-61)
- People management + executive communication
- Calm, decisive under incident pressure
- Familiarity with frameworks like MITRE ATT&CK, NIST CSF, and ISO 27001
- Palo Alto Networks firewall policy administration desirable
Certifications:
- Microsoft SC-100, SC-200, SC-300, SC-100, SC-500/AZ-500
- CISSP, GCIH
Experience:
- 5-8+ years in SecOps/IR with hands-on Microsoft security stack experience, demonstrated experience managing or working alongside a managed SOC/MSSP, 1-3+ years in a lead role preferred
Additional Information
Why Version 1?
At Version 1, we believe in providing our employees with a comprehensive benefits package that prioritises their wellbeing, professional growth, and financial stability.
- Share in our success with our Quarterly Performance-Related Profit Share Scheme, where employees collectively benefit from a share of our company's profits
- Strong Career Progression & mentorship coaching through our Strength in Balance & Leadership schemes with a dedicated quarterly Pathways Career Development programme
- Flexible/remote working, Version 1 is tremendously understanding of life events and people’s individual circumstances and offer flexibility to help achieve a healthy work life balance
- Financial Wellbeing initiatives including; Pension, Private Healthcare Cover, Life Assurance, Financial advice and an Employee Discount scheme
- Employee Wellbeing schemes including Gym Discounts, Bike to Work, Fitness classes, Mindfulness Workshops, Employee Assistance Programme and much more. Generous holiday allowance, enhanced maternity/paternity leave, marriage/civil partnership leave and special leave policies
- Educational assistance, incentivised certifications, and accreditations, including AWS, Microsoft, Oracle, and Red Hat
- Reward schemes including Version 1’s Annual Excellence Awards & ‘Call-Out’ platform.
- Environment, Social and Community First initiatives allow you to get involved in local fundraising and development opportunities as part of fostering our diversity, inclusion and belonging schemes.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
And many more exciting benefits… drop us a note to find out more.
Version 1 is an equal opportunities employer.
We are committed to building a diverse, inclusive and respectful workplace where everyone feels valued and able to thrive. We welcome applications from people of all backgrounds, identities and lived experiences, and we value the different perspectives people bring including those shaped by disability and neurodiversity.
We want every candidate to have a positive and accessible recruitment experience. If you need reasonable adjustments at any stage of the process, please contact your recruiter at Version 1. We will consider all requests carefully, respectfully and confidentially.
Video links: https://www.youtube.com/watch?v=F_d3ELTH5zo
Department: Services Reliability Group
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location