SOC Lead

La Fosse Associates Limited; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

ASOS is expanding its Cyber Security function and seeks a technically strong SOC Lead to provide leadership across security operations and own major incidents. The role keeps you hands-on and close to detail while guiding teams through containment, response and resolution.

You’ll work with Microsoft Sentinel and Wiz, drive automation, improve detection, and shape how the SOC operates as ASOS continues its investment in cyber resilience and incident response capability.

Qualifications

• Strong across Incident Response and Cyber Security Operations, including major incidents.
• Hands-on with SIEM technologies (Microsoft Sentinel, Splunk or similar).
• Experienced leading a SOC or Cyber Operations team and coordinating response during incidents.
• Interested in automation to improve security operations and reduce manual work.

Responsibilities

• Take ownership of major incidents and drive the technical response through to resolution.
• Coordinate technical teams and stakeholders under pressure while staying hands-on.
• Influence how the SOC operates and improve detection and incident response capability.
• Explore cloud security technologies and automation to strengthen security posture.

Job description

SOC Lead - ASOS

We've been exclusively engaged by ASOS to support the continued expansion of its Cyber Security function following a recent injection of investment into the business.

Cyber is a top priority for ASOS, and this is a genuinely exciting time to join the team as they continue to strengthen their Cyber Operations and Incident Response capability.

We're looking for a technically strong SOC Lead who can provide technical leadership across security operations and take ownership when serious or complex incidents occur.

This isn't a role for someone looking to step away from the technology.

You'll be expected to confidently take control of major incidents, drive the response and coordinate technical teams through to resolution, whilst remaining hands-on and close to the detail.

There's a high level of autonomy and an opportunity to influence how the SOC operates, improve Incident Response capability, strengthen detection and make greater use of automation and modern cloud security technologies including Microsoft Sentinel and Wiz.

The right person will be:

• Strong across Incident Response and Cyber Security Operations, including major and complex incidents.
• Experienced taking ownership of serious incidents and driving the technical response through to resolution.
• Hands-on with SIEM technologies, ideally Microsoft Sentinel, Splunk or similar.
• Strong across detection engineering, threat detection and EDR.
• Experienced operating across modern cloud security environments and technologies such as Wiz.
• Interested in using automation to improve security operations and reduce manual processes.
• Already operating as a senior member of a SOC or Cyber Operations team and comfortable being the person others turn to during a serious incident.
• A strong communicator who can bring together technical teams and wider stakeholders when under pressure.
• Naturally curious and inquisitive, with the instinct to understand not only what happened, but why it happened, what may have been missed and how it can be prevented in future.

We're particularly interested in people who enjoy solving difficult technical problems, challenging existing ways of working and continually looking for opportunities to improve security capability.

For someone who wants to stay technically close to Cyber Operations whilst taking on broader leadership and influence, there has never been a better time to join ASOS.