SOC Manager (Microsoft Partner MSSP)

Cloud People; England; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading Microsoft Security partner in the UK is seeking an experienced SOC Manager to lead their Security Operations Centre. This role offers the opportunity to evolve and scale SOC capabilities, ensuring effective incident detection and response. The ideal candidate will have a strong cybersecurity background, excellent leadership skills, and knowledge of Microsoft security services. This position allows for ownership and significant influence over processes and team development, making it a pivotal role for candidates eager to shape the future of SOC operations.

Qualifications

• Proven SOC or security operations leadership experience.
• Understanding of modern SOC capabilities built on Microsoft security stack.
• Experience leading during high-pressure incidents.

Responsibilities

• Lead and manage the SOC team for effective security incident response.
• Own the end-to-end incident response lifecycle.
• Provide regular SOC performance reporting to stakeholders.
• Coordinate during major security incidents.
• Drive continuous improvement across the SOC processes.

Skills

Strong cybersecurity background

Experience mentoring security analysts

Excellent communication skills

Knowledge of Microsoft security services

Ability to make decisions under pressure

Education

Relevant certifications (CISSP, CISM, CEH)

Tools

Microsoft Defender

Microsoft Sentinel

Job description

This role is with one of the UK’s most exciting Microsoft Security partners, recognised for building modern, outcome led security services. This hire is a key part of the evolution of their security practice. You will take ownership of their Security Operations Centre, leading the SOC function and setting the direction for how incidents are detected, managed, and resolved across a 24x7 environment.

Why This Role Stands Out

This is not a steady state SOC Manager role. You are being hired to evolve and scale the SOC capability, shaping how it operates today and how it grows in the future. You will have genuine influence over people, processes, tooling, and how the SOC works alongside threat intelligence, vulnerability management, and engineering teams. This is a role for someone who wants ownership, visibility, and impact rather than simply overseeing shifts and reporting.

Key Responsibilities

• Lead and manage the SOC team, ensuring effective monitoring, detection, and response to security incidents
• Own the end to end incident response lifecycle and act as incident manager for high priority incidents
• Provide clear and regular reporting to senior stakeholders on SOC performance and risk posture
• Coordinate internal teams and external stakeholders during major security incidents
• Drive post incident reviews and embed continuous improvement across the SOC
• Define, review, and enhance SOC processes aligned with industry best practice
• Act as the escalation point for L1, L2, and L3 analysts during investigations
• Mentor and develop analysts, building a high performing and commercially aware SOC team
• Stay current on emerging threats, vulnerabilities, and attacker techniques
• Deliver BAU operations against agreed KPIs and SLAs while supporting wider security initiatives

Ideal Experience

• Strong cybersecurity background with proven SOC or security operations leadership experience
• Good rounded knowledge of Microsoft security services, including Microsoft Defender, Microsoft Sentinel, and modern SOC capabilities built on the Microsoft security stack
• An understanding of how Copilot for Security fits into modern incident response and analyst workflows
• Comfortable leading during high pressure incident scenarios and making clear decisions
• Experience mentoring and developing security analysts
• Excellent communication skills with the ability to brief both technical teams and senior stakeholders
• Relevant certifications such as CISSP, CISM, or CEH are highly desirable

If you want to lead a Microsoft aligned SOC and actually shape how it works, rather than inherit someone else’s playbook, this role has real substance.