Lead SOC Analyst

Sopra Steria; United Kingdom; Hybrid; GBP 60,000; Full time

Job summary

A leading defence solutions provider in the UK is seeking a Lead Senior SOC Analyst to direct a team of SOC Analysts. You will monitor and triage security incidents while mentoring your team. The role is hybrid, requiring on-site presence in Gosport 1-2 days a week. Ideal candidates will have SOC experience, strong leadership skills, and familiarity with security tools like Microsoft Sentinel and Splunk. The position offers a competitive salary of £60K and excellent benefits.

Benefits

25 days annual leave

Health cash plan

Life assurance

Pension

Flexible benefits fund

Qualifications

• Proven experience in a Security Operations Centre.
• Ability to mentor and manage team members.
• Hands-on with security operations while leading.

Responsibilities

• Lead and empower a team of SOC analysts.
• Monitor and investigate security incidents.
• Provide Incident Response support.

Skills

Security Operations Centre experience

People management

Microsoft Sentinel

Splunk

Mitre Att&ck Framework knowledge

Client-server applications understanding

Multi-tier web applications

Relational databases

Influencing skills

Tools

Microsoft Sentinel

Splunk

Job description

Our Cyber team look after some complicated and compelling areas within Aero, Defence and Security. If you can lead from the front, work with a large and complex Defence account and have proven SOC experience. We have a lot to offer!

Our new position of Lead Senior SOC Analyst will direct a team of SOC Analysts, conduct monitoring and triage of alerts associated with host and network security events for our client's critical infrastructure and support the SOC through both delivery of client work and adding skills and ideas to this already diverse team. Come and make a significant impact on our long‑term success.

Hybrid role based 1 to 2 days on site in Gosport.

Please note you do need to be eligible for DV Clearance for this role.

What you'll be doing:

• Lead and empower a team of SOC analysts, providing mentoring, performance management, and career progression opportunities.
• Monitor, triage, and investigate security incidents on critical client infrastructure.
• Perform in‑depth analysis of network traffic, logs, and system events to identify potential security threats and vulnerabilities.
• Provide Incident Response support.
• Maintain, improve and develop team knowledge of SOC tools, security operations and triage.
• Prepare reports for managed clients to both technical and non‑technical audiences.
• Analyse and improve detection rules and use cases in line with Mitre Att&ck and threat‑informed defence.
• Represent the SOC within Stakeholders meetings.
• Ability to work in a hybrid approach from home and our Gosport office location.

What you'll bring:

• Experience in Security Operations Centre.
• People management experience to help develop Analysts and lead careers.
• Experience of using Microsoft Sentinel and Splunk.
• Knowledge and experience with Mitre Att&ck Framework.
• Solid ability to lead teams while staying hands‑on with security operations.
• Strong influencing skills and ability to persuade others, with a broad understanding of all aspects of SOC services.
• Solid grasp of client‑server applications, multi‑tier web applications, relational databases, firewalls, VPNs, and enterprise AntiVirus products.

It would be great if you had:

• Static malware analysis and reverse engineering.
• Programming and scripting such as Python, Perl, Bash, PowerShell, C++.
• CREST Practitioner Intrusion Analyst/Blue Teams Level 1 or other SOC related certifications.
• Experience with SIEM technologies, namely Sentinel and Splunk.

If you are interested in this role but not sure if your skills and experience are exactly what we're looking for, please do apply, we'd love to hear from you!

Employment Details

Employment Type: Permanent

Location: Hybrid: Gosport 1 to 2 days per week

Security Clearance Level: Eligible for DV Clearance

Internal Recruiter: Jane

Salary: £60K

Benefits: 25 days annual leave with the choice to buy additional days, health cash plan, life assurance, pension, and generous flexible benefits fund

Loved reading about this job and want to know more about us?

Sopra Steria's Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients.

The work we do makes a real difference to the client's goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK's most complex safety‑ and security‑critical markets.