Cyber Security Operations Centre Team Lead

Littlefish Group; United Kingdom; Hybrid; GBP 51,000 - 63,000; Full time

Benefits offered by this job

Referral bonus £1000

LinkedIn Learning access

Healthcare cash plan

Casual dress policy

Company Pension Scheme

Company social events

25 days annual leave + holidays

Annual leave purchase scheme

Job summary

Littlefish is seeking a Cyber Security Operations Centre Team Lead to support and lead a team of CSOC Analysts. This remote role connects to Nottingham, Sheffield or Bristol offices as required, offering leadership across incident response, service quality and continuous improvement.

You'll coach analysts, manage escalations, and collaborate with the wider SOC management team to enhance people, process and technology while delivering value to customers.

Qualifications

• Proven experience as a SOC Analyst or in security operations.
• Strong customer and stakeholder management.
• Experience in a service provider environment.
• Experience leading a team.
• Experience with Microsoft Security technologies.
• Experience using KPIs, SLAs and metrics to improve performance.
• Solid incident response and security operations knowledge.
• Excellent communication with technical and non-technical stakeholders.

Responsibilities

• Lead and manage day-to-day CSOC analyst activities with focus on quality and performance.
• Support the SOC Manager in delivering operational performance and analyst development.
• Coach and mentor analysts with meaningful development plans.
• Measure performance via QA activities and provide feedback.
• Support escalations and lead high-severity incidents with stakeholder communication.
• Identify and implement improvements across people, technology and processes.
• Support recruitment, onboarding, and development of CSOC Analysts.
• Assist shift planning to ensure coverage and resilience.
• Contribute to monthly reporting and customer service reviews.
• Continue to develop leadership and security knowledge.

Skills

SOC Analyst experience

Stakeholder management

Service provider experience

Team leadership

Microsoft Security

KPIs & SLAs

Incident response

Communication skills

Job description

Work location:

Remote, with connection to one of our offices in Nottingham, Sheffield or Bristol as required

Salary:

Up to £57,000, plus on-call reimbursement

Security clearance:

You must be eligible for SC clearance (typically requiring five years’ UK residency) and able to obtain NPPV Level 2 (NPPV2) clearance.

Here at Littlefish, we look for people who can make a real difference and become a giant slayer. As the world around us continues to change, we look for people who grab that change with optimism and excitement. These are the passionate and high performing people who enjoy and thrive on thinking outside the box.

Our current employees are the giant slayers who have made Littlefish who we are today, and you will be the future employees who continue to add the drive, passion, and add to our skills and experience as we see Littlefish grow.

The role and what you’ll be getting up to on a day to day basis:

We’re looking for a Cyber Security Operations Centre Team Lead to support, develop and lead a team of CSOC Analysts.

This is an opportunity for an established SOC professional who is ready to build on their technical security experience and take greater ownership of people leadership, service quality and day-to-day operational performance.

You’ll play an important role in creating an environment where analysts can perform at their best. You’ll provide coaching and direction, support the team through escalations and security incidents, and help us continually strengthen our people, technology and processes.

The role combines hands-on knowledge of security operations with team leadership, customer engagement and continuous improvement. You’ll work closely with the wider SOC management team to ensure we meet our commitments to customers while continuing to develop the capability and confidence of our people.

• Leading and managing the day-to-day activities of a team of CSOC Analysts, maintaining high standards of quality, performance and operational effectiveness.
• Supporting the SOC Manager in delivering operational performance, service quality and analyst development across the CSOC.
• Coaching and mentoring analysts, helping to shape meaningful development plans that maximise their potential.
• Measuring analyst performance through regular quality assurance activities, providing feedback and identifying opportunities for growth and improvement.
• Supporting the team with escalations and leading high-severity security incidents from an operational and technical perspective, ensuring effective stakeholder communication throughout.
• Working with the wider SOC management team to identify and implement improvements across people, technology and processes, including opportunities for automation and operational efficiency.
• Supporting recruitment activities, onboarding new starters and helping to develop the next generation of CSOC Analysts.
• Supporting shift and rota planning to ensure appropriate operational coverage and service resilience.
• Supporting monthly reporting and contributing to customer service reviews.
• Continuing to develop your own leadership and technical security knowledge.

We need a candidate with:

You’ll bring a proven and technical understanding of security operations, alongside the confidence to support people, manage competing priorities and communicate effectively with customers and stakeholders.

You’ll need:

• Proven experience as a SOC Analyst or within a security operations environment
• Demonstrable customer and stakeholder management experience
• Experience working within a service provider environment
• Experience managing or leading a team
• Experience working with Microsoft Security technologies,
• Experience monitoring and improving team performance through KPIs, SLAs and operational metrics
• Strong understanding of incident response and security operations processes
• Excellent communication skills, with the ability to engage effectively with both technical and non-technical stakeholders

It would be great if you also have

• ITIL Foundation V3 or V4
• Microsoft SC-200 certification
• CISSP, CISM or CISA certification
• Knowledge of Windows or Unix administration
• An understanding of vulnerability management and relevant HMG security standards and processes
• Commercial and ITIL awareness
• The ability to balance business requirements, technical quality and security standards

What can we offer you?

• Referral bonus scheme of £1000 when you successfully refer a friend.
• Access to our LinkedIn Learning platform, with over 16000 expert-led online tutorials to enhance and achieve your personal and professional goals.
• Healthcare cash plan. This will give you access to online GP appointments, 24/7 access to qualified counsellors and cash back against a range of general healthcare
• Casual dress policy
• Company Pension Scheme
• Company social events
• 25 days annual leave plus public / bank holidays
• Purchase of annual leave scheme

Life at Littlefish:

Our company values shape who we are as a business, what we stand for and how we work. Hiring people with our values at heart, is very important as we see Littlefish grow.

I am High Performing- I like to raise the bar, we look at creating opportunities to increase quality and improve efficiency, we strive for service excellence.

I am Passionate- We build team success and celebrate them together, I am enthusiastic and energetic, I care about the people I work with and we support one another.

I Have a Can-Do Attitude- I am not afraid to step outside my comfort zone, we are not afraid to challenge status quo, we get stuff done!

I am Cyber Conscious – I am vigilant, responsible, and proactive in protecting our people, customers and organisation from Cyber threats.

Here at Littlefish we aim to be somewhere everyone can be themselves. We are committed to encouraging a diverse and inclusive community where everyone irrespective of who they are, or their background, can feel equal and supported.

We encourage applications from people of all backgrounds. Please get in touch if you are concerned about any difficulties you may face during your recruitment process, so we adjust accordingly.

Part of our application process includes a set of ED&I (Equality, diversity and inclusion) questions. Please note, each question has a ‘prefer not to say ‘option).