SOC incident Response & Threat Hunting Manager

Fujitsu; Southampton; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading technology company in Southampton is seeking a highly skilled SOC Incident Response & Threat Hunting Manager. This pivotal role involves leading Tier 3 security analysts, overseeing incident response activities, and providing strategic direction for the Cyber Threat Intelligence capability. Candidates should have a robust technical background and exceptional leadership skills to foster a high-performing team while managing complex incidents. The company offers flexible working arrangements and a comprehensive benefits package.

Benefits

25 Days annual leave plus public holidays

Pension with double matching contributions

Life assurance

Companywide incentive plans

Flexible benefits options

Employee discounts

Employee assistance programme

Qualifications

• Strong technical background in SOC operations and incident response.
• Exceptional management skills in leading cross-functional teams.
• Deep understanding of digital forensics and incident response.

Responsibilities

• Provide expert guidance on complex security incidents.
• Lead high-severity incident response engagements.
• Drive strategic development of the Cyber Threat Intelligence team.
• Participate in the on-call rotation for critical incidents.

Skills

Analytical problem-solving

Collaboration and teamwork

Communication

Adaptability

Decision making

Continuous improvement

Job description

Job Title: SOC Incident Response & Threat Hunting Manager

Location: United Kingdom

Work Your Way is our approach to flexible working – this is available from day 1 of joining.

We are seeking a highly skilled and experienced SOC Incident Response & Threat Hunting Manager to join our growing Security Operations Centre. This pivotal role will be responsible for leading our Tier 3 Security and Incident Response Analysts, overseeing advanced incident response activities, driving proactive threat hunting initiatives, and providing strategic direction for the Cyber Threat Intelligence (CTI) capability.

This is a hands‑on leadership position requiring a strong technical background, exceptional management skills, and a strategic vision for cybersecurity. You will play a key role in mentoring and developing a high‑performing team, leading complex incident response engagements from initial detection through to post‑incident review, and significantly enhancing the security posture of our diverse customer base.

The role demands a unique blend of strategic leadership, deep technical expertise in digital forensics and incident response (DFIR), and a proactive mindset to anticipate and neutralise sophisticated and evolving cyber threats.

Key Responsibilities

• Provide expert guidance and technical oversight on complex security incidents and threat hunting operations.
• Lead and coordinate high‑severity incident response engagements, acting as the primary incident lead when required. This includes managing cross‑functional teams, communications, and critical decision‑making under pressure.
• Ensure all incident response and threat hunting activities are thoroughly documented, with comprehensive reporting delivered to stakeholders.
• Drive the strategic development and maturity of the CTI team, enhancing their capabilities, visibility, and the actionable insights derived from their research—both internally and for customers.
• Collaborate closely with CTI and Detection Engineering teams to translate raw intelligence into actionable threat hunting hypotheses and use cases.
• Design, execute, and lead advanced threat hunting exercises across varied customer environments, leveraging a deep understanding of adversary tactics, techniques, and procedures (TTPs).
• Integrate threat intelligence into hunting activities to maintain a proactive defence posture informed by current and emerging threats.
• Develop and deliver high‑quality in‑house training programmes for the SOC team, including tabletop exercises, forensic challenges, and upskilling sessions on new tools and techniques.
• Participate in the on‑call rotation to support critical incidents.

Your transferable skills and experience

• Analytical problem‑solving: ability to investigate complex data and identify patterns or anomalies
• Collaboration and teamwork: experience with working across functions to resolve time‑pressed issues.
• Communication: ability to explain technical findings in a clear manner to technical and non-technical audiences.
• Adaptability: comfortable learning new tools, processes and technologies quickly.
• Decision making: able to prioritise actions and make judgements under pressure.
• Continuous improvement: committed to documenting lessons learned and improving processes, practices and the skillset of the wider operational team.

Your benefits

• 25 Days annual leave plus public holidays (3 flexible)
• Pension – Double matching contributions of up to 10%
• Life assurance
• Companywide incentive plans
• Your choices (Flexible benefits such as increased holidays / travel / dental critical illness and more)
• Perks at work – employee discounts
• Employee assistance programme / virtual GP
• Role dependent benefits: Private medical / company car or car allowance

Recruitment process

The recruitment process consists of two stages of interview.

We are a Disability Confident Employer and will offer an interview to disabled applicants who meet the minimum / essential criteria for the role. Email [e-mail] if you would like to apply through the Disability Confident Interview Scheme.

Achieve together

We are recognised as a responsible and inclusive employer: Not only are we a certified Disability Confident Leader, a Times Top 50 employer for Gender Equality, a Top 75 employer for Social Mobility, accredited with the Living Wage Foundation and a signatory for the Race at Work Charter, but we are also committed to the United Nations standards for LGBTI+ and a Stonewall Top 100 Employer.

We are people centric: Our work environments enable you to Be Completely You. Our active people‑led Inclusive Community networks are representative of all aspects of diversity and are instrumental in enabling and supporting our innovative approach to inclusion.