What you will be doing:
1. Lead, mentor, and develop SOC analysts and incident responders.
2. Provide technical direction, conduct performance reviews, and foster continuous improvement.
3. Oversee full lifecycle of security incidents from detection to resolution.
4. Ensure compliance with SLAs and escalation protocols.
5. Maintain and enhance incident response plans and procedures.
6. Direct threat intelligence collection and analysis.
7. Manage vulnerability assessments and coordinate remediation.
8. Monitor and analyse security events across multiple platforms.
9. Identify, assess, and escalate threats and vulnerabilities.
10. Maintain and evolve SOC operational documentation and processes.
11. Deliver training, mentorship, and knowledge sharing across the team.
12. Ensure tool proficiency and promote a culture of continuous learning.
13. Communicate effectively with senior stakeholders on risks and incidents.
14. Provide regular SOC performance reports and updates.
15. Ensure SOC operations adhere to CREST and ITIL standards.
16. Support accreditation maintenance and operational readiness.
What you will bring:
17. Demonstrated experience leading Security Operations Centre (SOC) teams in a 24×7 environment, driving operational excellence and continuous improvement.
18. Ability to harness data analysis to detect threats, identify trends, and deliver actionable security insights.
19. Strong track record in threat detection, incident management, and escalation handling.
20. Hands-on experience managing SIEM and SOAR platforms such as Splunk, Microsoft Sentinel, or Elastic.
21. Skilled in coaching analysts, building high-performing teams, and managing effective shift models.
22. Confident communicator with the ability to translate complex technical risks into clear business impacts for senior stakeholders.
23. Familiarity with NIST Cybersecurity Framework and MITRE ATT&CK.
24. Understanding of ISO 27001 standards and compliance best practices.
25. Working knowledge of the CREST SOC Maturity Model.
26. Experience applying ITIL processes across incident, problem, and change management.
It would be great if you had:
27. Vendor-specific accreditations ( Splunk Certified, Microsoft SC-200).
28. Relevant security or management certifications.
If you are interested in this role but not sure if your skills and experience are exactly what we’re looking for, please do apply, we’d love to hear from you!
Employment Type: Full Time, Permanent
Location: Hemel Hempstead ON-SITE
Security Clearance Level: ideally SC or DV Cleared, willing to obtain DV clearance
Internal Recruiter: Lee
Salary: negotiable on experience
Benefits: £6,600 car allowance, 25 days annual leave with the option to buy additional days, private health care, life assurance, pension, and generous flexible benefits fund