Cyber Operations Team Lead

About the role

We are seeking an experienced Cyber Operations Team Lead to head our Threat Operations team, enhancing cyber exposure assessment and threat monitoring capabilities. The role involves leading analysts, managing workflows, and collaborating across technical teams to improve detection and response.

Key responsibilities

• Lead, mentor, and develop a team of Threat Operations Analysts.
• Manage daily workflows, case allocation, SLAs, and quality reviews.
• Oversee the accuracy and timeliness of threat and vulnerability notifications.
• Act as the senior escalation point for complex exposure validation and high‑impact vulnerabilities.
• Collaborate with Threat Research, Engineering, and Data teams on detection, automation, and tooling improvements.
• Drive continuous improvement of operational processes, playbooks, and workflows.
• Support customer‑facing technical discussions and ensure clear, actionable communication.

Required profile

• Senior experience in Cyber Operations, SOC, MSSP, Threat Monitoring, or a similar environment.
• Proven experience leading or mentoring analysts and managing operational workflows.
• Strong understanding of TCP/IP, ports, protocols, and internet‑facing services.
• Deep knowledge of vulnerabilities, CVE/CVSS, adversary behaviour, and exploitation principles.
• Hands‑on experience with Shodan, Censys, LeakIX, Nuclei, DNS/WHOIS investigations.
• Excellent technical communication and stakeholder management skills.

Required skills

• TCP/IP, ports, and protocol analysis.
• Internet‑facing service assessment.
• CVE and CVSS evaluation.
• Adversary behaviour analysis.
• Exploitation principle understanding.
• Shodan, Censys, LeakIX, and Nuclei tooling.
• DNS and WHOIS investigation techniques.