Hybrid SOC Team Lead – Lead & Respond (Bristol)

The Opportunity Hub UK Ltd; West of England; Hybrid; GBP 48,000 - 67,000; Full time

Benefits offered by this job

Hybrid working

Private medical insurance

Pension contribution

Bonus scheme

Job summary

The Opportunity Hub UK Ltd in Bristol is seeking a SOC Team Lead to guide a team of analysts across shifts and ensure critical incidents are triaged effectively.

You will own incident response from detection through to resolution, refine detection rules, review threat intel, and report trends to senior stakeholders while mentoring junior to senior analysts. Hybrid role with Bristol base.

Qualifications

• Solid hands-on experience with SIEM platforms, EDR tools, and incident response processes.
• A track record of leading or mentoring a security team, even informally.
• Comfortable under pressure. Incidents don’t wait for a convenient time.
• Clear communicator, able to explain technical risk to non‑technical stakeholders.
• Working knowledge of frameworks such as MITRE ATT&CK or NIST.
• Relevant certifications (CISSP, GCIH, or similar) are useful, though practical skill matters more

Responsibilities

• Lead a team of SOC analysts across shifts, setting priorities and making sure nothing critical slips through triage
• Own incident response from detection through to resolution, coordinating with wider IT and client teams where needed
• Refine detection rules and playbooks so the SOC catches more with less noise
• Review and act on threat intelligence feeds, adjusting monitoring priorities as the landscape changes
• Report on SOC performance and incident trends to senior stakeholders, in language they can actually use
• Mentor analysts and support their development, from junior hires through to senior contributors

Skills

SIEM

EDR

Incident response

Team leadership

MITRE ATT&CK

NIST

CISSP

GCIH

Job description

The Opportunity Hub UK Ltd in Bristol is seeking a SOC Team Lead to guide a team of analysts across shifts and ensure critical incidents are triaged effectively.

You will own incident response from detection through to resolution, refine detection rules, review threat intel, and report trends to senior stakeholders while mentoring junior to senior analysts. Hybrid role with Bristol base.