SOC Incident Response & Threat Hunting Manager

We are seeking a highly skilled and experienced SOC Incident Response & Threat Hunting Manager to join our growing Security Operations Centre. This pivotal role will be responsible for leading our Tier 3 Security and Incident Response Analysts, overseeing advanced incident response activities, driving proactive threat hunting initiatives, and providing strategic direction for the Cyber Threat Intelligence (CTI) capability.

This is a hands-on leadership position requiring a strong technical background, exceptional management skills, and a strategic vision for cybersecurity. You will play a key role in mentoring and developing a high-performing team, leading complex incident response engagements from initial detection through to post-incident review, and significantly enhancing the security posture of our diverse customer base.

The role demands a unique blend of strategic leadership, deep technical expertise in digital forensics and incident response (DFIR), and a proactive mindset to anticipate and neutralise sophisticated and evolving cyber threats.

Find out if this opportunity is a good fit by reading all of the information that follows below.

Key Responsibilities:

• Provide expert guidance and technical oversight on complex security incidents and threat hunting operations.
• Lead and coordinate high-severity incident response engagements, acting as the primary incident lead when required. This includes managing cross-functional teams, communications, and critical decision-making under pressure.
• Ensure all incident response and threat hunting activities are thoroughly documented, with comprehensive reporting delivered to stakeholders.
• Drive the strategic development and maturity of the CTI team, enhancing their capabilities, visibility, and the actionable insights derived from their research—both internally and for customers.
• Collaborate closely with CTI and Detection Engineering teams to translate raw intelligence into actionable threat hunting hypotheses and use cases.
• Design, execute, and lead advanced threat hunting exercises across varied customer environments, leveraging a deep understanding of adversary tactics, techniques, and procedures (TTPs).
• Integrate threat intelligence into hunting activities to maintain a proactive defence posture informed by current and emerging threats.
• Develop and deliver high-quality in-house training programmes for the SOC team, including tabletop exercises, forensic challenges, and upskilling sessions on new tools and techniques.
• Participate in the on-call rotation to support critical incidents.

Your transferable skills and experience:

• Analytical problem-solving: ability to investigate complex data and identify patterns or anomalies
• Collaboration and teamwork: experience with working across functions to resolve time pressured issues.
• Communication: ability to explain technical findings in a clear manner to technical and non-technical audiences.
• Adaptability: comfortable learning new tools, processes and technologies quickly.
• Decision making: able to prioritise actions and make judgements under pressure.
• Continuous improvement: committed to documenting lessons learned and improving processes, practices and the skillset of the wider operational team.

Your benefits:

25 Days annual leave plus public holidays (3 flexible)

Pension – Double matching contributions of up to 10%

Life assurance

Companywide incentive plans

Your choices (Flexible benefits such as increased holidays/ travel/ dental critical illness and more)

Perks at work – employee discounts

Employee assistance programme/ virtual GP

Role dependent benefits: Private medical/ company car or car allowance

Recruitment process

The recruitment process consists of two stages of interview

We are a Disability Confident Employer and will offer an interview to disabled applicants who meet the minimum/essential criteria for the role. Email EMEIArecruitment@fujitsu.com if you would like to apply through the Disability Confident Interview Scheme.

Achieve together

We are recognised as a responsible and inclusive employer: Not only are we a certified Disability Confident Leader, a Times Top 50 employer for Gender Equality, a Top 75 employer for Social Mobility, accredited with the Living Wage Foundation and a signatory for the Race at Work Charter, but we are also committed to the United Nations standards for LGBTI+ and a Stonewall Top 100 Employer.

We are people centric: Our work environments enable you to Be Completely You. Our active people-led Inclusive Community networks are representative of all aspects of diversity and are instrumental in enabling and supporting our innovative approach to inclusion.