Lead, Security and Network Operations

About the role

The Lead, Security and Network Operations will head the Security and Network Operations Centre (SNOC) to protect service availability and minimise security risk across a complex, multi‑site, multi‑country technology estate. The role ensures real‑time monitoring, rapid incident response, coordinated service restoration and continuous improvement of detection and response capabilities.

Key responsibilities

• Lead, mentor and manage SNOC analysts, engineers and incident responders, overseeing shift schedules and quality assurance for 24/7 operations.
• Direct end‑to‑end incident triage, containment, eradication and restoration, maintaining a single source of truth in the ITSM platform.
• Govern enterprise observability standards across data‑centre, LAN, WAN, cloud, remote‑access and OT environments.
• Oversee SIEM, EDR, SOAR and firewall telemetry, ensuring log ingestion, rule optimisation, alert tuning and automation.
• Coordinate threat‑intelligence gathering, proactive threat hunting and vulnerability tracking with patch‑management teams.
• Drive network performance monitoring, change‑governance reviews and maintain the SNOC risk register.
• Produce root‑cause analyses, after‑action reports and manage corrective‑action tracking.
• Develop and maintain runbooks, playbooks and SOPs, driving automation to improve alert quality and efficiency.

Required profile

• Bachelor’s degree in Computer Science, IT, Engineering or a related field.
• 7–12 years of IT operations experience, with at least 3 years leading a NOC, SOC or combined SNOC in a multi‑site enterprise.
• Strong enterprise networking expertise across data‑centre, campus LAN, WAN, cloud and remote‑access environments.
• Practical security‑operations experience, including SIEM and EDR alert triage.
• ITIL‑aligned incident and major‑incident management knowledge.

Required skills

• SIEM platforms (e.g., Microsoft Sentinel, FortiAnalyzer)
• Endpoint Detection & Response tools (e.g., Microsoft Defender, Palo Alto Cortex XDR)
• SOAR solutions
• Firewall telemetry and log management
• Network monitoring tools (e.g., PRTG)
• ITSM platforms (e.g., ServiceNow)
• ITIL incident management processes
• Vendor management and SLA governance