SOC Shift Lead

SOC Shift Lead (SC Clearance Required) - Multiple UK Locations (Shift Work) - £65,000 - £70,000 - Permanent

Are you ready to take the lead in a fast-paced, high-impact cybersecurity environment? We're looking for a SOC Shift Lead to guide a team of talented analysts in protecting critical infrastructure across multiple UK locations.
This is a hands-on leadership role where you'll oversee security monitoring, incident response, and continuous improvement of SOC operations. You'll work with cutting-edge technologies and frameworks, including Microsoft Sentinel, Splunk, and the MITRE ATT&CK framework, while mentoring and developing your team.

Key Responsibilities:

• Lead and manage a team of SOC Analysts across shift operations.
• Monitor, triage, and investigate security incidents on critical infrastructure.
• Perform in-depth analysis of network traffic, logs, and system events.
• Enhance SOC capabilities through detection rule tuning and threat-informed defence.
• Maintain incident documentation and represent the SOC in partner meetings.
• Work a rotating shift pattern: 2 days (6am-6pm), 2 nights (6pm-6am), followed by 4 days off.

• Proven experience in a Security Operations Centre environment.
• Strong people management and mentoring skills.
• Hands-on experience with Microsoft Sentinel and Splunk.
• Familiarity with the MITRE ATT&CK framework.
• Solid understanding of networking principles and enterprise security tools.

• Experience in static malware analysis and reverse engineering.
• Scripting/programming skills (Python, Bash, PowerShell, etc.).
• Relevant certifications (eg, Crest Practitioner Intrusion Analyst, Blue Team Level 1).
• Exposure to other SIEM platforms like QRadar.

• Permanent role with a generous benefits package including 25 days annual leave (plus buy/sell options), pension, life assurance, health cash plan, and a flexible benefits fund.
• Applicants must be eligible for Developed Vetting (DV) clearance.