The Role: Head of Network Observability and Analysis
Location: Sheffield, UK
Position Type: Contract Inside IR35
Remote work option Available: Hybrid - 3 Days Onsite
Job Description:
Key responsibilities:
- Own the definition and delivery of the network observability and analysis approach, including scope, architecture, tooling, and roadmap
- Strong technical understanding of DNS, routing, certificates and exposure data, EDR signals, asset inventory)
- Build and improve the data layer to ingest, normalise, and reconcile telemetry and configuration state into analysable, queryable datasets
- Partner with analytics and data science teams to develop detection and insight use cases on top of the data
- Work in partnership with network engineering to address instrumentation gaps and align with authoritative sources of truth
- Define coverage and data quality metrics so visibility gaps are measurable and trackable
- Report progress, insights, and key risks to senior security and technology stakeholders
Required skills and experience:
- Strong networking knowledge: routing, DNS, perimeter and cloud architectures, large enterprise environments
- Strong data engineering and analysis skills: large scale telemetry, streaming and batch pipelines, SQL and Python, modern storage and query platforms
- Experience building or scaling a capability in a complex organisation
- Comfortable working hands-on (prototype, query, script) while setting direction
- Experience working in regulated or high security environments, able to work with both engineers and senior stakeholders
Nice to have:
- Financial services experience
- Experience working in a large multi-national organisation
- Exposure to security operations, attack surface management, or threat detection engineering