Security Operations Centre Manager

G-Research; Greater London; On-site; GBP 75,000 - 110,000; Full time

Benefits offered by this job

Annual discretionary bonus

35 days annual leave

Company pension contributions

Healthcare

Cycle-to-work

Monthly social events

Relocation support

Job summary

G-Research is seeking a SOC Manager in London to lead a team of security analysts across high‑performance compute and hybrid cloud environments. You will own the daily delivery of triage, investigations and incident response while setting standards for quality and process.

You will mentor staff, drive improvements in detection, tooling and workflow, and collaborate with CSIRT counterparts to shape playbooks and analytics. A strong security background and leadership are essential.

Qualifications

• Substantial experience in security operations or IR with hands-on alert handling and investigations.
• Formal line-management experience or mentoring capabilities.
• Strong knowledge of security fundamentals, network security, endpoints, and common attack paths.
• Experience coordinating incident response and making decisions under pressure.
• Track record of improving operational quality and consistency within a team.
• Practical experience with SIEM/XDR/SOAR tools is desirable.
• Clear communication with technical teams and senior stakeholders.
• Scripting or automation in Python/PowerShell/Bash; cloud or HPC exposure is a plus.

Responsibilities

• Lead, line-manage and develop a team of analysts.
• Own day-to-day triage, investigation and incident response delivery.
• Set and maintain standards for case quality and documentation.
• Manage rotas and handovers for consistent coverage.
• Coach analysts on alert triage, forensics and threat hunting.
• Drive continuous improvement of workflows, tooling and processes.
• Report on team performance and operational metrics.
• Collaborate with senior CSIRT analysts to shape detection rules and playbooks.

Skills

Security operations

Incident response

Team leadership

Stakeholder communication

Automation scripting

Education

Security certifications

Tools

SIEM

XDR

SOAR

Job description

We tackle the most complex problems in quantitative finance, by bringing scientific clarity to financial complexity.

From our London HQ, we unite world-class researchers and engineers in an environment that values deep exploration and methodical execution - because the best ideas take time to evolve. Together we’re building a world-class platform to amplify our teams’ most powerful ideas.

As part of our engineering team, you’ll shape the platforms and tools that drive high-impact research - designing systems that scale, accelerate discovery and support innovation across the firm.

Take the next step in your career.

The role

We are looking for a Security Operations Centre (SOC) Manager to lead our team of analysts in London. The SOC monitors, investigates and responds to security alerts across our high-performance compute, hybrid cloud and corporate environments.

As SOC Manager, you will own the day-to-day operational delivery and development of the team. You will act as an escalation point, set the standard for triage and help the team grow, working closely with the wider security teams to improve the quality and speed of detection and response.

Key responsibilities of the role include:

• Leading, line-managing and developing a team of analysts
• Owning the day-to-day delivery of triage, investigation and incident response
• Setting and maintaining standards for case quality, documentation and process
• Managing rotas and handovers to ensure consistent operational coverage
• Coaching analysts across alert triage, forensics and threat hunting
• Driving continuous improvement of workflows, tooling and operational processes
• Reporting on team performance and operational metrics

• Helping shape detection rules, analytics and playbooks alongside the senior CSIRT analysts

Who are we looking for?

The ideal candidate will have a number of the following skills and experience:

• Substantial experience in a security operations or incident response role, including hands-on alert handling and investigations
• Experience leading or mentoring analysts; formal line-management experience
• Strong knowledge of security fundamentals, including network security, endpoint artefacts and common attack paths
• Experience coordinating incident response and making decisions under pressure
• A track record of improving operational quality and consistency within a team
• Practical experience with SIEM, XDR or SOAR tools
• Clear communication with both technical teams and senior stakeholders
• Scripting or automation experience in languages such as Python, PowerShell or Bash is desirable, as is exposure to cloud or high-performance compute environments
• Relevant certifications or leadership and management qualifications are beneficial but not required

Why should you apply?

• Highly competitive compensation plus annual discretionary bonus
• Lunch provided (via Just Eat for Business) and dedicated barista bar
• 35 days' annual leave
• 9% company pension contributions
• Informal dress code and excellent work/life balance
• Comprehensive healthcare and life assurance
• Cycle-to-work scheme
• Monthly company events
• Experience days: all-expenses-paid, bucket-list outings with colleagues, from Michelin-star tasting menus to European day trips.

Relocation Support

If you're relocating from within the UK or internationally to join us in London, we offer a comprehensive range of support services to assist you all the way. All costs associated with your relocation and immigration are covered by G-Research.

• Concierge service: Your personal consultant will arrange travel, help find your new home and manage your move. They're also on hand to help with more bespoke requests too.
• Immigration support: We'll partner you with an expert consultant who will guide you through the full immigration process.

.