SOC Manager - Lead Incident Response & Team Growth

G-Research; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Competitive compensation with annual/3

Lunch provided and barista bar

35 days annual leave

9% company pension contributions

Healthcare and life assurance

Cycle-to-work scheme

Monthly company events

Relocation support

Job summary

G-Research is seeking a Security Operations Centre (SOC) Manager in London to lead a team of analysts responsible for monitoring, investigating and responding to security alerts across high-performance compute, hybrid cloud and corporate environments.

You will own day-to-day delivery, set triage standards, and help the team grow by coordinating with wider security teams to improve detection and response speed and quality.

Qualifications

• Substantial experience in security operations or incident response.
• Formal line-management or team-lead experience.
• Strong knowledge of security fundamentals incl. network security and endpoints.
• Experience coordinating incident response and decisions under pressure.
• Track record of improving operational quality and consistency.

Responsibilities

• Lead and develop a team of security analysts.
• Own day-to-day triage, investigations and incident response.
• Set standards for case quality, documentation and process.
• Manage rostering and handovers for coverage.
• Coach analysts in alert triage, forensics and threat hunting.
• Drive improvements to workflows, tooling and processes.
• Report on team performance and metrics.
• Contribute to rules, analytics and playbooks with CSIRT analysts.

Skills

Security operations

Incident response

People leadership

Communication with stakeholders

Scripting (Python/PowerShell/Bash)

Cloud / HPC environments

Tools

SIEM

XDR

SOAR

Python

PowerShell

Job description

G-Research is seeking a Security Operations Centre (SOC) Manager in London to lead a team of analysts responsible for monitoring, investigating and responding to security alerts across high-performance compute, hybrid cloud and corporate environments.

You will own day-to-day delivery, set triage standards, and help the team grow by coordinating with wider security teams to improve detection and response speed and quality.