London SOC Manager - Incident Response Lead

Gresearch; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Competitive compensation

Annual bonus

Lunch provided

35 days annual leave

Pension plan

Healthcare

Cycle to work

Team events

Job summary

G-Research, based in London, seeks a Security Operations Centre (SOC) Manager to lead a team of analysts. You will own daily operations for triage, investigations, and incident response, while raising standards for case quality and documentation.

You will mentor analysts, shape detection rules, and drive workflow improvements across SIEM/XDR/SOAR tools, coordinating with senior CSIRT colleagues. A strong leadership background is essential.

Qualifications

• Substantial experience in security operations or incident response with hands-on alert handling.
• Experience leading or mentoring analysts; formal line-management experience.
• Strong knowledge of security fundamentals including network security and endpoint artifacts.
• Experience coordinating incident response and making decisions under pressure.
• Practical experience with SIEM, XDR or SOAR tools.
• Clear communication with technical teams and senior stakeholders.
• Scripting or automation in Python/PowerShell/Bash desirable; exposure to cloud/HPC environments.
• Relevant certifications or leadership qualifications beneficial but not required.

Responsibilities

• Lead, line-manage and develop a team of analysts.
• Own day-to-day triage, investigations and incident response delivery.
• Set and maintain standards for case quality and process documentation.
• Manage rotas and handovers for consistent coverage.
• Coach analysts on alert triage, forensics and threat hunting.
• Drive continuous improvement of workflows, tooling and processes.
• Report on team performance and operational metrics.
• Contribute to detection rules, analytics and playbooks with CSIRT colleagues.

Skills

Security operations

Incident response

People management

Scripting/Automation

Tools

SIEM

XDR

SOAR

Job description

G-Research, based in London, seeks a Security Operations Centre (SOC) Manager to lead a team of analysts. You will own daily operations for triage, investigations, and incident response, while raising standards for case quality and documentation.

You will mentor analysts, shape detection rules, and drive workflow improvements across SIEM/XDR/SOAR tools, coordinating with senior CSIRT colleagues. A strong leadership background is essential.