About this role
Salary: £? - ? per year
Requirements: We require active DV clearance.Demonstrable experience working within a SOC or comparable cyber security operations environment.Experience leading security monitoring activities and supervising analysts during live operational service.Strong knowledge of SIEM platforms, log analysis, security monitoring technologies, and security event investigation.Experience investigating complex cyber security events and determining appropriate escalation paths.Good understanding of cyber-attack techniques, indicators of compromise, threat intelligence, and defensive monitoring.Experience mentoring or coaching technical staff in an operational environment.Excellent analytical, investigative, and problem-solving skills.Strong written and verbal communication skills, including the ability to communicate clearly under operational pressure.Ability to make timely decisions in a fast-paced 24/7 operational environment.Professional certifications such as Microsoft SC-200, GIAC GCIH, GCIA, CompTIA CySA+, or equivalent.Desirable: Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms.Desirable: Experience developing monitoring improvements, detection tuning, or operational processes.Desirable: Experience supporting Incident Responder activities during major cyber security incidents.Desirable: Experience contributing to monitoring use cases and detection improvements.Desirable: Applied knowledge of MITRE ATT&CK or equivalent adversary behaviour frameworks. Responsibilities: Lead shift-based delivery of Security Monitoring services, ensuring timely and effective monitoring, investigation, triage, and escalation of cyber security events.Supervise and coordinate a Senior SOC Analyst, ensuring investigations meet professional, technical, and documentation standards.Act as Duty Lead for Security Monitoring, providing technical leadership and making operational decisions during live cyber security events.Review and quality-assure SOC investigations, confirming findings are accurate, evidence-based, and clearly documented.Lead complex and high-priority cyber security investigations before escalation to the Incident Response team, as delegated by the Principal SOC Analyst.Deliver clear and effective shift handovers, maintaining situational awareness and continuity across ongoing investigations and incidents.Coordinate with Incident Responders during cyber security incidents, communicating analytical findings, timelines, indicators of compromise, and supporting evidence.Collaborate with SOC Engineers to improve monitoring coverage, alert quality, and operational effectiveness.Support the onboarding of new systems, applications, and cloud services into SOC monitoring by validating monitoring content and operational readiness.Drive continuous improvement across monitoring processes, investigation techniques, and analyst efficiency, recommending enhancements to the Principal SOC Analyst.Mentor and coach SOC Analysts, supporting their professional development and promoting consistent analytical standards and investigation best practice.Ensure compliance with SOC operating procedures, security monitoring standards, and information-handling requirements.Identify and escalate operational issues, monitoring gaps, and emerging threats to the Principal SOC Analyst and SOC Manager. Technologies: CloudSupportSecurity More:
We are seeking three Lead SOC Analysts to provide operational leadership for our Security Monitoring function and ensure consistent, high-quality monitoring, investigation, and escalation. This is an initial six-month contract based in Buckinghamshire, paying £80 per hour for 42-hour weeks. The role follows 12-hour shifts, 7am–7pm and 7pm–7am, with seven days and seven nights across a four-week pattern.
last updated 39 week of 2026