Lead SOC Analyst - DV Cleared

Network IT; Aylesbury; On-site; GBP 170,000 - 180,000; Full time

Job summary

Network IT invites applications for a Lead SOC Analyst - DV Cleared role in Buckinghamshire. This six-month contract requires overseeing 24/7 security monitoring, leading a shift-based team and coordinating investigation and escalation of cyber events.

The role demands active DV clearance and hands-on leadership of a Senior SOC Analyst. You will supervise incident reviews, ensure high-quality monitoring and provide operational decision-making during live events.

Qualifications

• Demonstrable experience in a SOC or cyber security operations environment.
• Experience leading security monitoring activities and supervising analysts during live operations.
• Strong knowledge of SIEM platforms, log analysis, and security event investigation.
• Experience in mentoring or coaching technical staff within an operational environment.

Responsibilities

• Lead shift-based delivery of Security Monitoring services, ensuring timely monitoring, investigation, triage and escalation of cyber security events.
• Supervise and coordinate a Senior SOC Analyst, ensuring investigations meet professional and technical standards.
• Act as Duty Lead for Security Monitoring, providing technical leadership during live cyber security events.
• Review and quality-assure SOC investigations, ensuring findings are well-documented.
• Lead complex cyber security investigations before escalation to Incident Response, as delegated by the Principal SOC Analyst.
• Deliver clear shift handovers and maintain situational awareness across ongoing investigations and incidents.
• Coordinate with Incident Responders during cyber security incidents, communicating findings and timelines.
• Collaborate with SOC Engineers to improve monitoring coverage and response efficiency.
• Support onboarding of new systems into SOC monitoring and validate readiness.
• Drive continuous improvement across monitoring processes and analyst performance.
• Mentor and coach SOC Analysts on best practices and analytical standards.
• Ensure compliance with SOC procedures and information-handling requirements.
• Identify and elevate operational issues and threats to leadership.

Skills

SOC operations

Leadership

SIEM knowledge

Incident investigation

Communication skills

Decision making under pressure

Mentoring

Cyber security investigations

Education

Professional certifications (e.g., SC-200, GCIH, GCIA, CySA+)

Tools

Microsoft Sentinel

LogRhythm

Job description

This temporary position as Lead SOC Analyst - DV Cleared in Buckinghamshire offers £80 per hour on a 42-hour week. The successful candidate must hold active DV clearance. Working a 12-hour shift pattern covering 7am-7pm and 7pm-7am, across 7 days and 7 nights within a four-week rotation, this six-month contract centres on operational leadership of the Security Monitoring function. Responsibilities include overseeing shift-based delivery, ensuring prompt investigation, triage and escalation of cyber events, and supervising a Senior SOC Analyst to maintain professional and technical standards. The post holder also acts as Duty Lead, coordinating responses and upholding consistent, high-quality security monitoring throughout every rotation.

YOU MUST HAVE ACTIVE DV CLEARANCE Lead SOC Analyst £80 per hour - 42 hour weeks 12 Hour shifts (7am-7pm and 7pm-7am) 7 Days and 7 Nights over a 4-week pattern 6 month contract initially Buckinghamshire

Summary

The 3x Lead SOC Analysts will be responsible for the operational leadership of the Security Monitoring function, ensuring the consistent delivery of high-quality security monitoring, investigation and escalation activities.

Responsibilities

• Lead the shift-based delivery of Security Monitoring services, ensuring timely and effective monitoring, investigation, triage and escalation of cyber security events.
• Supervise and coordinate a Senior SOC Analyst, ensuring investigations meet required professional, technical and documentation standards.
• Act as Duty Lead for Security Monitoring, providing technical leadership and making operational decisions during live cyber security events.
• Review and quality-assure SOC investigations, confirming findings are accurate, evidence-based and clearly documented.
• Lead complex and high-priority cyber security investigations before escalation to the Incident Response team, as delegated by the Principal SOC Analyst.
• Deliver clear and effective shift handovers, maintaining situational awareness and continuity across ongoing investigations and incidents.
• Coordinate with Incident Responders during cyber security incidents, clearly communicating analytical findings, timelines, indicators of compromise and supporting evidence.
• Collaborate with SOC Engineers to improve monitoring coverage, alert quality and operational effectiveness.
• Support the onboarding of new systems, applications and cloud services into SOC monitoring by validating monitoring content and operational readiness.
• Drive continuous improvement across monitoring processes, investigation techniques and analyst efficiency, recommending enhancements to the Principal SOC Analyst.
• Mentor and coach SOC Analysts, supporting their professional development and promoting consistent analytical standards and investigation best practice.
• Ensure compliance with SOC operating procedures, security monitoring standards and information-handling requirements.
• Identify and elevate operational issues, monitoring gaps and emerging threats to the Principal SOC Analyst and SOC Manager.

Required Skills / Experience

• Demonstrable experience working within a SOC or comparable cyber security operations environment.
• Experience leading security monitoring activities and supervising analysts during live operational service.
• Strong knowledge of SIEM platforms, log analysis, security monitoring technologies and security event investigation.
• Experience investigating complex cyber security events and determining appropriate escalation paths.
• Good understanding of cyber-attack techniques, indicators of compromise, threat intelligence and defensive monitoring.
• Experience in mentoring or coaching technical staff within an operational environment.
• Excellent analytical, investigative and problem-solving skills.
• Strong written and verbal communication skills, including the ability to communicate clearly under operational pressure.
• Ability to make timely decisions within a fast-paced 24/7 operational environment.
• Profession certifications such as Microsoft SC-200, GIAC GCIH, GCIA, CompTIA CySA+ or equivalent.

Desirable

• Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms.
• Experience developing monitoring improvements, detection tuning, or operational process development.
• Experience supporting Incident Responder activities during major cybe