SOC Operations Manager

Fynity; England; On-site; GBP 70,000 - 90,000; Full time

Job summary

A security operations firm in the United Kingdom is seeking a SOC Operations Manager to lead a high-performing SOC team. You will shape security operations for multiple high-profile customers, enhancing cyber resilience and ensuring operational excellence. Ideal candidates have experience in 24x7 SOC environments, strong incident management skills, and technical depth in SIEM tools like Splunk and Microsoft Sentinel. This role provides the autonomy to innovate and impact strategies significantly.

Qualifications

• Proven experience leading SOC operations.
• Strong background in incident management and escalation processes.
• Technical depth across SIEM/SOAR tools.

Responsibilities

• Lead and develop a skilled SOC team.
• Oversee the lifecycle of security incidents.
• Manage SIEM and SOAR platforms to enhance detection.

Skills

Leadership in a 24x7 SOC environment

Incident management

Threat detection

Communication skills

Team development

Tools

Splunk

Microsoft Sentinel

Elastic

Job description

SOC Operations Manager

Hemel Hempstead (On-site)

Security Clearance – Willing and Able to go through the DV process.

Are you an experienced SOC Operations Manager ready to take the next step in your career? This is an exceptional opportunity to lead, shape, and elevate a Security Operations Centre that supports multiple high-profile customers across diverse industries.

We’re looking for someone with the drive to build high-performing teams, enhance operational excellence, and play a pivotal role in strengthening cyber resilience. You’ll have the freedom to make a real impact—defining strategy, driving continual improvement, and mentoring talented analysts to deliver world-class detection and response capabilities.

As the SOC Operations Manager, you will:

• Lead and develop a skilled SOC team, inspiring a culture of continuous learning and technical excellence.
• Oversee the full lifecycle of security incidents — from detection through to resolution and review.
• Manage and optimise SIEM and SOAR platforms (Splunk, Sentinel, Elastic) to enhance detection and automation capabilities.
• Drive continuous improvement through ITIL-aligned processes and adherence to CREST standards.
• Oversee vulnerability management, threat intelligence, and incident response plans.
• Communicate security posture, risks, and incident outcomes clearly to senior stakeholders.
• Ensure operational readiness and contribute to maintaining industry accreditations.
• Have held budgetary responsibility

You will be able to bring a number of the following to this SOC Operations Manager role:

• Proven experience leading SOC operations in a 24×7 or multi-client environment.
• Strong background in incident management, threat detection, and escalation processes.
• Technical depth across SIEM/SOAR tooling, preferably Splunk or Microsoft Sentinel.
• A passion for developing teams — coaching analysts and building collaborative, high-performing cultures.
• Strong understanding of frameworks and standards such as NIST, MITRE ATT&CK, ISO 27001, CREST, and ITIL.
• Excellent communication skills, with the ability to translate technical risks into clear business impacts.

Desirable

• Vendor certifications such as Splunk Certified or Microsoft SC-200.
• Security or leadership certifications (e.g., CISSP, CISM, ITIL).

Why This SOC Operations Manager role?

This is more than just an operational role it’s a chance to define the future of a SOC function. You’ll have the platform, support, and autonomy to innovate, influence strategy, and drive measurable improvement across people, process, and technology.

If you’re looking for a hands‑on leadership role where your ideas and expertise genuinely shape outcomes, this is your opportunity.