Senior SOC Lead: Incident Commander & Threat Hunter

AtkinsRéalis; Epsom; Hybrid; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Hybrid working culture

Job summary

AtkinsRéalis in the United Kingdom seeks an experienced SOC Level 3 Analyst to lead complex cybersecurity investigations and incident response within a global 24x7 SOC. You will guide detection, threat intelligence, and automation initiatives, mentoring analysts and coordinating with diverse teams.

Reporting to the SOC Manager, you will drive improvements in detections, playbooks, and response procedures, while leading incident exercises and engaging stakeholders at all levels.

Qualifications

• Experience in a 24x7 SOC or Incident Response environment, ideally supporting a global organisation.
• Proven track record of improving threat detection, monitoring, incident response and SOC maturity at scale.
• Hands-on experience with SIEM platforms, threat intel solutions, SOAR and enterprise security monitoring technologies.

Responsibilities

• Lead complex and high-severity cyber security investigations and incident response activities in a 24x7 SOC.
• Act as Technical Incident Lead or Incident Commander during major incidents, coordinating response and communicating with stakeholders.
• Conduct proactive threat hunting, investigations and forensic triage across endpoints, network, cloud and identities.

Skills

Technical incident response

Threat hunting

MITRE ATT&CK analysis

Industry certifications (CISSP/GCIH/GC

Advanced threat investigation

Threat intelligence

Incident management

Technical writing

Automation scripting

Tools

SIEM platforms

SOAR

Threat intelligence platforms

Job description

AtkinsRéalis in the United Kingdom seeks an experienced SOC Level 3 Analyst to lead complex cybersecurity investigations and incident response within a global 24x7 SOC. You will guide detection, threat intelligence, and automation initiatives, mentoring analysts and coordinating with diverse teams.

Reporting to the SOC Manager, you will drive improvements in detections, playbooks, and response procedures, while leading incident exercises and engaging stakeholders at all levels.