SOC Operations Lead: Incident Response & Delivery

NTT America, Inc.; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

NTT DATA in the United Kingdom is seeking a Security Operations Team Lead to supervise the SOC's day-to-day operations, lead a team of security analysts and engineers, respond to incidents, and drive improvements within established frameworks.

You'll manage service delivery against SLAs/KPIs, coordinate incident response, mentor staff, and promote automation and ticketing discipline while reporting to clients and stakeholders.

Qualifications

• 5+ years in a Security Operations Centre or related security environment.
• At least 2 years in a team lead or supervisory role.
• Strong understanding of incident detection, escalation, and resolution processes.
• Experience with SIEM, IDS/IPS, endpoint protection, and threat intelligence platforms.
• Ability to manage team performance and guide junior staff in their development.
• Excellent verbal and written communication skills.
• Relevant certifications (e.g., CompTIA Security+, GCIH, SSCP, CEH); CISSP or CISM is a plus but not mandatory.
• Eligible for UK SC clearance.

Responsibilities

• Manage and oversee SOC operations and delivery of managed security services to clients.
• Monitor service performance against SLAs and KPIs, ensuring consistent and high-quality execution.
• Implement standard procedures and best practices for incident management, threat monitoring, and vulnerability assessments.
• Serve as the escalation point for client concerns and day-to-day operational issues.
• Coordinate and manage incident response efforts in collaboration with senior SOC staff and technical teams.
• Ensure timely detection, escalation, containment, and resolution of security incidents.
• Lead and mentor a team of SOC analysts, providing regular feedback and training.
• Organise team schedules to maintain 24/7 SOC coverage (if applicable).
• Promote knowledge sharing and adherence to operational playbooks and standards.
• Identify opportunities to streamline processes and improve SOC effectiveness.
• Support implementation of tools and automation to enhance detection and response.
• Assist with operational maturity assessments and track metrics like MTTD and MTTR.
• Work with internal stakeholders and technical teams to ensure smooth service delivery.
• Provide input into customer-facing documentation, such as incident summaries and operational dashboards.
• Maintain awareness of emerging threats and ensure appropriate measures are taken.

Skills

SOC operations

Team leadership

Incident response

SIEM/IDS-IPS

Endpoint protection

Threat intelligence platforms

Communication skills

UK SC clearance eligible

Education

CompTIA Security+

GCIH

SSCP

CEH

CISSP

CISM

Tools

SIEM

IDS/IPS

Endpoint protection

Threat intelligence platforms

Job description

NTT DATA in the United Kingdom is seeking a Security Operations Team Lead to supervise the SOC's day-to-day operations, lead a team of security analysts and engineers, respond to incidents, and drive improvements within established frameworks.

You'll manage service delivery against SLAs/KPIs, coordinate incident response, mentor staff, and promote automation and ticketing discipline while reporting to clients and stakeholders.