Full job description

SOC Shift Lead - Watford, UK

• Package of up to £78,000 Depending on Experience
• Full time onsite role - shift work
• Active SC clearance required, and you must be eligible for DV

ABOUT THE CLIENT

Our client is a well-established cyber security organisation delivering managed security services to customers operating within highly secure and mission critical environments.

They continue to invest heavily in their Security Operations Centre capability and are now looking for an experienced SOC Shift Lead to strengthen their technical leadership team.

THE BENEFITS

• Opportunity to work on high-profile security operations
• Career progression within a growing cyber security team
• Ongoing technical training and certification support
• Exposure to enterprise and critical national infrastructure environments

THE SOC SHIFT LEAD ROLE

As SOC Shift Lead, you will oversee the operational delivery of a busy Security Operations Centre while remaining hands-on with technical investigations. You will act as the senior escalation point during your shift, leading incident response, mentoring analysts and ensuring high standards across investigations.

You will also:

• Lead Major Incident investigations and technical response activities
• Analyse advanced network, endpoint and cloud security events
• Drive improvements to detection logic and operational processes
• Coach and develop SOC Analysts through real-time guidance and regular feedback
• Work closely with engineering teams to enhance detection capabilities

SOC SHIFT LEAD ESSENTIAL SKILLS

• Previous experience as a Senior SOC Analyst, SOC Team Lead or SOC Shift Lead
• Strong experience leading complex cyber security investigations
• Commercial experience with Microsoft Sentinel and Splunk Enterprise Security
• Excellent understanding of MITRE ATT and CK, incident response and threat-informed defence
• Strong networking knowledge including TCP/IP, DNS, HTTP/S, SMTP, LDAP and VPN technologies
• Experience analysing Windows, Linux, endpoint, identity, network and cloud security logs
• Ability to mentor and develop technical teams
• Active SC Clearance, eligibility for DV