Welcome page

Threat Detection & Response Lead

Job Locations UK
ID
2026-2215
Category
Cyber Security Practice
Type
Full-Time

What you'll be doing:

At Atech (part of the Iomart Group), we're a leading managed services and cybersecurity provider, helping organisations stay secure, resilient and one step ahead of emerging threats.

 

In this role, you'll be:

  • Leading and evolving our Threat Detection & Response capability, helping shape the future of our SOC services.
  • Taking the lead during major cyber incidents, providing technical direction and driving investigations to resolution.
  • Owning our threat intelligence programme, turning emerging threats into actionable security insights.
  • Driving detection engineering, improving our ability to identify and respond to threats across customer environments.
  • Overseeing vulnerability management, ensuring customers receive clear, practical remediation guidance.
  • Acting as the go-to technical escalation point for complex investigations, threat hunts and security events.
  • Leading proactive threat hunting activities to uncover risks before they become incidents.
  • Reviewing and approving key changes within the Threat Detection & Response service.
  • Working closely with customers during high-profile security events and escalations.
  • Coaching and developing senior analysts, helping build a high-performing and technically excellent team.
  • Improving processes, standards and investigation methodologies to strengthen service maturity.
  • Contributing cybersecurity expertise, threat intelligence and strategic insight across the wider Cyber Practice.
  • Supporting hiring, onboarding and development initiatives as the team continues to grow.

This is a hands-on leadership role for a cyber security expert who enjoys solving complex threats, mentoring others, and shaping cutting-edge detection and response services.

We want to hear from you if you:

  • Have significant hands-on experience with Microsoft Sentinel, Microsoft Defender XDR and Microsoft Entra ID Protection in an enterprise, MSSP or MDR environment.
  • Have a proven track record of threat hunting, detection engineering and incident response, including investigating complex attacks and developing high-quality detections.
  • Can demonstrate experience leading or coordinating major security incidents, providing clear direction while keeping stakeholders informed throughout.
  • Have strong knowledge of threat intelligence, attack chain analysis and multi-telemetry correlation, using these to improve detection and response capabilities.
  • Have experience overseeing or contributing to vulnerability management programmes, including risk prioritisation and remediation guidance.
  • Can define and implement technical standards, processes and operational improvements that raise the maturity of a Security Operations function.
  • Have experience managing, coaching and developing analysts or engineers, supporting career growth and building high-performing teams.
  • Are comfortable engaging with senior stakeholders and can communicate security risks, incidents and recommendations clearly and confidently.
  • Have experience working within a SOC, MDR or MSSP environment, with a strong understanding of modern threat detection and response practices.
  • Can provide technical leadership on security tooling, detection strategies and service improvements, balancing operational effectiveness with business priorities.
  • Build strong relationships with customers and internal stakeholders and can act as a trusted escalation point for complex security matters.
  • Continuously look for opportunities to improve detection coverage, reduce response times and enhance overall security outcomes.

Nice to have

  • Experience working across multi-cloud environments and security technologies beyond the Microsoft ecosystem.
  • Advanced security training or certifications from providers such as SANS, ISC2, ISACA or CREST.
  • Experience managing or overseeing an enterprise-scale vulnerability management programme.
  • Exposure to service development, presales activities or security service portfolio management.
  • Experience within a managed security services environment.

Above all, you're an experienced cyber security leader with deep detection and response expertise, a passion for developing people, and a proven ability to lead teams through complex security challenges while continually improving security outcomes.

 

What's in it for me?

  • Competitive salary and the opportunity to grow your career within a leading technology and cybersecurity business.
  • 34 days annual leave including bank holidays, plus your birthday off.
  • 4x salary life assurance for added peace of mind.
  • Enhanced family leave, including 26 weeks' full pay for maternity and adoption leave, and 3 weeks' full pay for paternity leave.
  • Company pension scheme with employer contributions.
  • 12 dedicated training days per year, plus full access to LinkedIn Learning to support your professional development.
  • Flexible benefits platform offering Cycle to Work, Tech Scheme, gym membership discounts, retail savings, and more.
  • Tax-efficient salary sacrifice electric vehicle scheme, making it easier and more affordable to drive a new EV.
  • Health and wellbeing support, including healthcare cash plans and optional critical illness cover.
  • Employee Assistance Programme (EAP) providing confidential support and counselling whenever you need it.
  • A supportive, collaborative culture with genuine opportunities to learn, develop and progress your career.

Who you'll be doing it for:

Atech part of the Iomart Group is a highly accredited Microsoft Partner who delivers transformed technology with managed services. Our team of certified Microsoft experts align with your team to deliver an excellent service tailored to your individual needs, 24/7/365.

  • Our services support 25,000 users globally and proactively monitor 45,000+ devices in key areas:
  • Azure Infrastructure Managed Service
  • Modern Workplace: Office 365, Microsoft 365, and Azure Virtual Desktop
  • Managed Security and SOC with Microsoft Defender, Sentinel

What to do next:

Please click apply if you like the sound of this. If you do not have an up to date CV or want to have a chat about the role first, please contact us on careers@iomart.com

 

We’re an equal opportunities employer and want our vacancies to be available to all, so if you need us to make any reasonable adjustments during the process then just let us know.

Options

Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
Share on your newsfeed