SOC Lead: Incident Response & Security Ops

PA Consulting; Belfast City District; Hybrid; GBP 70,000 - 105,000; Full time

Benefits offered by this job

Health and lifestyle perks

25 days annual leave

Generous pension

Annual performance-based bonus

PA share ownership

Cycle to work

Job summary

PA Consulting is seeking a Security Operations Manager to lead SOC analysts and incident response specialists within its Digital Trust & Cyber Security practice. You will manage live incidents, drive improvements to SIEM, SOAR and EDR, and guide clients in modernising security operations and resilience.

You will work across enterprise and public sector engagements, coach teams, and contribute to a culture of learning, collaboration and client impact. UK residency may be needed for clearance.

Qualifications

• Experience leading a SOC/CSOC or incident response team.
• Proven track record handling live cyber incidents (ransomware, account takeovers, supply chain).
• Solid understanding of MITRE ATT&CK, NIST CSF, NCSC Caf v4.0 and ISO 27001.
• Ability to communicate incident findings clearly to engineers and leaders.

Responsibilities

• Lead and develop SOC analysts and incident response specialists with clear direction.
• Lead hands-on during cyber incidents including containment and recovery.
• Help clients assess and improve their Security Operations capabilities across people, processes and tech.
• Advise on evolution of SIEM, SOAR and EDR tooling to improve detection and response.
• Develop incident playbooks, runbooks and automated response workflows.
• Share expertise across PA's Digital Trust & Cyber Security community through coaching and mentoring.

Skills

SOC Leadership

Incident Response

Communication

Security Frameworks

Client-facing Advisory

Tools

SIEM/SOAR tools

EDR/XDR platforms

Cloud security monitoring

Job description

PA Consulting is seeking a Security Operations Manager to lead SOC analysts and incident response specialists within its Digital Trust & Cyber Security practice. You will manage live incidents, drive improvements to SIEM, SOAR and EDR, and guide clients in modernising security operations and resilience.

You will work across enterprise and public sector engagements, coach teams, and contribute to a culture of learning, collaboration and client impact. UK residency may be needed for clearance.