Lead SecOps Command Center (Hybrid) - 24x7 Security Ops

TESTQ Technologies LTD.; United Kingdom; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

TESTQ Technologies LTD. is seeking a SecOps Command Center Lead to oversee a 24x7 security operations center in a hybrid setup (3 days in the office).

The role combines leadership of a shift-based team with hands-on monitoring, triage, and escalation across endpoints, networks and identity tools. Qualifications include 10+ years in SOC, strong English communication, and a preference for GSEC or equivalent certifications.

Qualifications

• At least 10+ years in 24x7 SOC environments.
• Experience leading or supervising a shift-based security monitoring team.
• Strong knowledge of cybersecurity fundamentals.
• Proficient in security alert triage and escalation across endpoints, networks and identity tools.
• Experience with SLA/KPI reporting and RCA facilitation.
• Clear written and spoken English, including leadership reporting.

Responsibilities

• Lead the SecOps Command Center across shifts, manage rosters and handovers.
• Own shift schedule to ensure 24x7 coverage with no gaps.
• Coach analysts on triage quality, tool use and SOP adherence.
• Review shift performance: alerts, response times, and missed alerts.
• Escalate incidents with evidence and recommended actions to client security teams.
• Keep ServiceNow tickets updated and closed with clear notes/logs.
• Produce daily/weekly SecOps status reports for leadership and stakeholders.
• Maintain SOPs, escalation matrices, and knowledge-base articles.

Skills

Leadership

Shift scheduling

Security monitoring

Incident escalation

SOP adherence

English communication

Education

GSEC or equivalent SOC cert

Tools

Splunk

Jamf

ServiceNow

Job description

TESTQ Technologies LTD. is seeking a SecOps Command Center Lead to oversee a 24x7 security operations center in a hybrid setup (3 days in the office).

The role combines leadership of a shift-based team with hands-on monitoring, triage, and escalation across endpoints, networks and identity tools. Qualifications include 10+ years in SOC, strong English communication, and a preference for GSEC or equivalent certifications.