A private bank needed to strengthen its security operations centre against a rising volume of sophisticated financial threats, with real-time threat detection and incident response.
The volume and sophistication of financial threats was rising. The bank needed hands-on capability in the SOC rotation, able to work at pace under real pressure.
A polymer textile manufacturer moving into the artificial leather market needed technical expertise beyond its own bench, covering equipment, formulation and plant setup.
A market infrastructure institution needed one person to own IT governance, risk and compliance. Here's how we hit the mark.
A product-led technology company in scientific communication and research enablement was scaling its portfolio and needed a senior engineering leader to hold technical governance across several platforms.
An industrial automation and heavy engineering organisation was expanding its automation capability and needed a divisional manager to lead complex, robotics-led programmes.
Fill in the form and our team will get back to you within 24 hours.
Screening covered hands-on SIEM and EDR experience, incident playbooks, malware analysis and real-time log monitoring. The profile was defined with the bank's own cyber security team, so the technical bar matched the tooling in the environment rather than a generic security specification. A security operations centre runs at pace under real pressure, so candidates were assessed on what they had done during live incidents.
Marquee drew on a specialised pool of certified security professionals with five or more years of experience. Certifications held included CEH and CompTIA Security+. Experience was weighed alongside the certification rather than behind it, since a security operations centre rewards judgement under time pressure. Candidates were screened on incident playbooks and malware analysis together, because both come into play during a live investigation.
Marquee fast-tracked this search to complete the bank's 24/7 security operations centre rotation. Searching begins within twelve hours of a signed brief, against an industry standard of 48 to 72 hours before a first list appears, and an agreed shortlist follows in about eight days. A rotation that runs around the clock carries a standing requirement for cover, so the brief was treated as urgent from the first conversation.
Mean time to detect improved through optimised alert monitoring and triage. False positives reduced substantially once SIEM rules were fine-tuned, which freed the senior security team for high-priority investigations. Updated threat intelligence feeds were integrated into the monitoring system, and high-priority threats were escalated to senior engineers with greater speed and clarity. The analyst also joined post-incident reviews to strengthen the bank's defensive posture.
Yes. Marquee runs permanent and fractional security mandates through the same evaluation. What changes is how long the person stays and where the contract sits. A permanent seat suits an open-ended position on the rotation. A fractional engagement suits a defined programme of work, such as a tooling migration or a compliance cycle. Marquee works on a contingent basis, so a fee falls due when a candidate joins.