The Role: Head of Network Observability and Analysis
Location: Sheffield, UK
Position Type
Contract
Inside IR35
Remote work option Available: Hybrid – 3 Days Onsite
Job Description
Key responsibilities:
Own the definition and delivery of the network observability and analysis approach, including scope, architecture, tooling, and roadmap
Strong technical understanding of DNS, routing, certificates and exposure data, EDR signals, asset inventory)
Build and improve the data layer to ingest, normalise, and reconcile telemetry and configuration state into analysable, queryable datasets
Partner with analytics and data science teams to develop detection and insight use cases on top of the data
Work in partnership with network engineering to address instrumentation gaps and align with authoritative sources of truth
Define coverage and data quality metrics so visibility gaps are measurable and trackable
Report progress, insights, and key risks to senior security and technology stakeholders
Required skills and experience
- Strong networking knowledge: routing, DNS, perimeter and cloud architectures, large enterprise environments
- Strong data engineering and analysis skills: large scale telemetry, streaming and batch pipelines, SQL and Python, modern storage and query platforms
- Experience building or scaling a capability in a complex organisation
- Comfortable working hands-on (prototype, query, script) while setting direction
- Experience working in regulated or high security environments, able to work with both engineers and senior stakeholders
Nice to have
- Financial services experience
- Experience working in a large multi-national organisation
- Exposure to security operations, attack surface management, or threat detection engineering