Overview
Join to apply for the SOC Technical Team Lead role at Registers of Scotland.
Pay and benefits
* Pay range: The base salary is £46,677-£54,957. The Digital, Data and Technology Annual Pay supplement of 20% is included in the total remuneration.
* Pension: 28.97% of base salary (RoS contribution)
* Annual leave: 38 days annual holiday, increasing to 42 days with length of service.
* Duration: Permanent
* Working pattern: 35 hours per week. Flexible working patterns may be considered on a case-by-case basis (e.g., compressed hours, term-time, or part-time).
* Location: Hybrid working model. Contractual base at Meadowbank House, Edinburgh (EH8 7AU), or St Vincent Plaza, Glasgow (G2 5LD). Attendance at one location as required by the role.
* Grade: Senior Executive Officer
* Number of vacancies: 1
The Role
We are seeking a technically skilled and people-focused SOC Technical Team Lead to join our Cyber Security team at Registers of Scotland. This role provides both technical leadership and line management for the Security Operations Centre (SOC) team, ensuring the delivery of high-quality threat detection, incident response, and vulnerability management services.
We’re looking for candidates with at least three years experience in a Security Operations Centre or similar environment, to ensure they bring the hands-on expertise and operational insight needed to lead effective incident response and support a high-performing security team.
As SOC Technical Team Lead, you’ll lead a team of analysts and work closely with cyber engineers to develop and automate threat detection and response playbooks. A key part of the role is ensuring SOC processes are fully integrated with existing ITSM workflows and that service levels are monitored and reported through agreed SLA/OLA metrics and outcome-driven key performance indicators.
On a typical day you will…
* Provide line management, coaching, and development to SOC analysts and engineers.
* Lead the configuration, tuning, and maintenance of core SOC capabilities including log aggregation, alerting, correlation, threat detection, and response tooling.
* Collaborate with cyber engineers to develop and automate detection logic and incident response playbooks.
* Work with our Technical Product Manager and Security Architect to ensure SOC capabilities align with enterprise security architecture and strategy.
* Develop and maintain scenario-based runbooks and technical procedures for incident response.
* Engage with project teams to provide security assurance for new and existing services.
* Drive continuous improvement in SOC operations, tooling, and team capability.
* Monitor and report on SOC performance, including:
o SLA/OLA adherence and incident handling timelines
o Volume and severity of security incidents
o Average time to detect (MTTD) and respond (MTTR) to threats
o Accuracy and relevance of alerts (e.g. reducing false alarms)
o Coverage of threat detection across systems and services
o Outcome-focused metrics such as reduced dwell time, successful containment rates, and measurable improvements in security posture
This job is for you if you want…
* Work with purpose: we strive to provide the best public service and set the bar for land and property registration worldwide.
* Flexible and hybrid working: work when and where it’s best for you and your stakeholders, depending on the role and team requirements.
* Benefits: enjoy pay progression, pension contributions of up to 29%, up to a year’s parental leave, and 38 days annual holiday, increasing to 42 days with length of service.
* Investment in professional development: we invest in all our people so that they have the right skills to be productive and confident in their job.
* Diversity and Inclusion: We are an ‘Investor in People’ and a ‘Disability Confident’ employer. We are inclusive, stronger together, and committed to putting our people first.
* Positive work culture: RoS is an agile, digital organisation using leading-edge technology. Colleagues understand their role in achieving our strategy and have the autonomy to deliver.
To learn more about RoS and the benefits we offer visit our careers pages or watch this short video.
Hear directly from our colleagues about their experience of working within our Digital, Data and Technology teams on our website.
Click 'Apply' to view the full advert and application process.
Seniority level
* Mid-Senior level
Employment type
* Full-time
Job function
* Administrative
Industries
* Government Administration
#J-18808-Ljbffr