SOC and Incident Response Lead

asos.com Ltd; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

25 days leave

Discretionary bonus

Private medical care

Flexible benefits

Learning opportunities

Job summary

ASOS is seeking an experienced SOC and Incident Response Lead to guide hands-on security across monitoring, detection, engineering, and investigations. You will lead the SOC and incident response teams, drive improvements, and coordinate with external MSSP to ensure effective incident resolution.

The role bridges technology, cyber security, and partners, reporting to the Head of Security Operations. You will mentor analysts, manage workload, and drive continuous improvement.

Qualifications

• Proficiency with incident response tooling including SIEM/EDR and forensic platforms.
• Experience leading SOC Analysts and Incident Responders under pressure.
• Ability to translate security issues into business risk for leadership.

Responsibilities

• Lead the SOC and Incident Response team, provide technical direction and coaching.
• Own and improve detection lifecycle, tuning alerts and adding detections.
• Establish incident response processes and run post-mortems and drills.
• Coordinate with cloud security, identity, email security, and third parties.
• Define KPIs and dashboards; report to senior management.

Skills

SIEM

EDR

Cloud security

Threat intel

Forensic analysis

Incident response

Stakeholder management

Mentoring

Azure/AWS

Tools

Azure

AWS

Job description

We’reASOS, the online retailer for fashion lovers all around the world.

We exist to give our customers the confidence to be whoever they want to be, and that goes for our people too. At ASOS,you’refree to be your true self without judgement, and channel your creativity into a platform used by millions.

But how are we showing up?We’reproud members of InclusiveCompanies,are Disability Confident Committed and have signed the Business in the Community Race at Work Charter and we placed 8th in the Inclusive Top 50 Companies Employer list.

Everyone needs some help showing up as their best self. Let our Talent team know if you need any adjustments throughout the process in whatever way works best for you.

Job Description

The Role

As an experienced SOC and Incident Response Lead at ASOS, you will provide hands‑on technical leadership across security monitoring, detection,engineering, incident response, and threat‑led investigations. You will lead the SOC and Incident Response team, ensure security incidents are investigated and resolved effectively, andmaintaina strong operating relationship with our external MSSP. The ideal candidate will combine deep technicalexpertisewith proven experience leading analysts, improving operational capability, managing stakeholders, and making sound decisions under pressure.

The role will act as the bridge between wider technology teams, the cyber security team, and third‑party partners, ensuring a coordinated and consistent response to cyber security incidents.

This role reports to the Head of Security Operations.

Responsibilities

• Lead the SOC and Incident Response team day to day, providing technical direction, coaching analysts,maintainingeffective operations, and ensuring the team has clear priorities, strong morale, and the capability to respond to complex security incidents.
• Own and improve the SOC detection lifecycle, including reviewing detection coverage, tuning noisy or low‑value alerts, creating new detections from threat intelligence and incident learnings, and mapping coverage against relevant attack techniques and critical business assets.
• Establish andmaintainincident response processes, procedures, and documentation, ensuring they align with industry best practices.
• Strong hands‑on experience with SIEM, EDR, cloud security, identity, email security, and forensic analysis tooling, with the ability to investigate incidents,validatedetections, and guide analysts through complex technical findings.
• Define incident response metrics, dashboards,trackand report on key performance indicators (KPIs) to senior management, suggesting improvements as needed.
• Delegate unassigned newlysubmittedtickets to analysts keeping in mind current workloads and availability.
• Conduct regular incident response training and drills to enhance team readiness and improve response times.
• Lead incident post‑mortem analysis toidentifyroot causes, lessonslearned, andrecommend measures for prevention or improvement.
• Conduct periodic threat simulation activities to evaluate the adequacy of deployed detective/preventativecontrols.

Qualifications

About you

• Proficiency in incident response tooling, including SIEM, EDR, cloud security, threat intelligence and forensic analysis platforms.
• Demonstrable experience leading and coordinating responses to complex cyber security incidents, acting as a technical lead during high‑pressure situations.
• Proven experience managing, mentoring and developing SOC Analysts and Incident Responders within a Security Operations environment.
• Strong analytical and problem‑solving abilities, with the capability to rapidly assess, contain and remediate security threats.
• Ability to make effective decisions under pressure whilst managing multiple incidents, priorities and stakeholders simultaneously.
• Experience working with cloud security technologies and environments, particularly Azure and/or AWS.
• Experience building, tuning and improving security monitoring, detection engineering and threat detection capabilities.
• Strong stakeholder management and communication skills, with the ability to translate technical security issues into clear business risk and impact for senior leadership.
• Experience conducting incident post-mortems, root cause analysis, tabletop exercises and crisis response testing to drive continuous improvement.
• Working knowledge of UK security and compliance frameworks, including PCI-DSS, GDPR, NIST, ISO 27001 and Cyber Essentials.

Additional Information

• Employee sample sales
• 25 days paid annual leave + an extra celebration day for a special moment
• Discretionary bonus scheme
• Private medical care scheme
• Flexible benefits allowance - which you can choose to take as extra cash, or use towards other benefits
• Opportunity for personalised learning and in‑the‑moment experiences that enable you to thrive and excel in your role

By clicking the link above or any third‑party link within this posting, you are leaving this site and going to a third‑party website where the third‑party website's terms and privacy policy apply