Senior Security Operations Centre (SOC) Specialist £44,241 to £58,997 12 views

473253 Senior Security Operations Centre (SOC) Specialist £44,241 to £58,997

Driver and Vehicle Licensing Agency

Apply before 11:55 pm on Sunday 16th August 2026

📍 Location: Swansea (This role is suitable for hybrid working)

💷 Salary: £44,241 – £58,997 (The base pay is £44,241. In addition to this the role includes a Digital and Data allowance of up to £14,756)
A Civil Service Pension with an employer contribution of 28.97%

🕘️ Contract Type: Permanent – Flexible working, Full-time, Job share, Part-time

🏆️ Available Positions: 1

The Security Operations Centre (SOC) is central to protecting DVLA’s critical digital services, ensuring the security and resilience of systems relied upon by millions of citizens every day. The SOC team provide various services such as technical protective monitoring, threat intelligence and hunting, incident response and forensics, working closely with internal stakeholders and specialist suppliers to identify, investigate and respond to cyber threats. Operating within a rapidly evolving threat landscape, the team plays a key role in safeguarding one of the UK’s largest public sector digital estates.

This role exists to lead and undertake technical protective monitoring, monitoring of security events and performance of security tool, as well as investigating and handling (or assisting in handling) security events.

This role is responsible for undertaking all aspects of SOC activity, including hands-on monitoring of SIEM (security incident and event management) tools and other sources of alerts and of threat intelligence, managing the analyst team, maintaining the relationship with the vendors and suppliers of SOC products, including where relevant contract management responsibilities.

Top Responsibilities

• Owning the cyber security processes associated with SOC.
• Responsible for delivering a number of cyber security services in line with agreed SLA’s. This includes technical protective monitoring and incident response which involves technical investigation, in support of the designated Incident Controller (and as required to act as Incident Controller), as part of the Cyber Security Incident and Event Management Process.
• Manage relationships with third-party suppliers, product vendors, service delivery units and DVLA stakeholders to support the delivery and continuous improvement of SOC services and associated security technologies.
• Managing risks associated with SOC and relevant technical security controls – with risk to be reviewed at least monthly and contribution made to monthly Cyber Security risk report.
• Providing expert advice and recommendations regarding risk assessment and business impact related to technical cyber security controls and SOC activities.

For more information on the role and responsibilities please see the full job advert on CS Jobs using the link provided.

Benefits

• Best in class learning and development tailored to your role
• An environment with flexible working options where we encourage a great work-life balance
• A culture encouraging inclusion and diversity with a range of staff communities to support all our colleagues
• Generous employer contribution of 28.9%, depending on chosen pension scheme
• Flexible working options where we encourage a great work-life balance.
• Digital communities with clear career frameworks
• On-site gym plus personal training available (membership applies)
• On-site nursery, restaurants and coffee bar
• 25 days holiday (plus bank holidays), increasing by 1 each year (up to 30) & 8 Bank Holidays plus an additional Privilege Day to mark the King’s birthday.
• 24-hour Employee Assistance Programme providing free confidential help and advice for staff.
• Free parking

About You

• You will be a security professional with significant experience of cyber security, and a broad knowledge of the issues and techniques associated with securing a variety of technologies.
• You will have experience of the range of activities of a SOC including using a SIEM tool to monitor network traffic and user behaviour for potentially malicious activity; investigating security events and anomalous patterns of activity; and responding to alerts and handling incidents.
• You will have substantial practical experience of using SIEM Tool, (Preferably LogRhythm or Sentinel) and some experience of Clearswift content filters and Tufin.
• We expect that such experience will be evidenced, such as by possession of relevant qualifications, though evidence of actual practical application will also be sought.
• You will have a real understanding of risk and have experience of making security relevant decisions based on assessing risks.

Additional Information

The role is part of the Government Security Profession Career Framework and utilises an enhanced Capability–Based Pay Framework which provides access to a Digital and Data allowance.

The base pay is £44,241. In addition to this the role includes a Digital and Data allowance of up to £14,756.

The value of allowance awarded will be based on an assessment of your skills and experience as demonstrated through the selection process.

How to Apply

👉 Read the full description and apply here: https://bit.ly/4fN10Do

This vacancy closes at 23:55 on Sunday 16^th August 2026