SOC Shift Lead

Searchability NS&D; Hemel Hempstead; On-site; GBP 65,000 - 78,000; Full time

Benefits offered by this job

On-site role

Training & certification support

Career progression

Job summary

Searchability NS&D is seeking a SOC Shift Lead to supervise a busy Security Operations Centre, while remaining hands-on in investigations. You will lead major incident responses, mentor analysts, and work with engineering to improve detections across networks, endpoints and cloud.

The role requires active SC clearance and DV eligibility, with on-site shift work and opportunities for certification and career progression.

Qualifications

• Active SC clearance and DV eligibility required.
• Experience leading complex cyber security investigations.
• Strong exposure to MS Sentinel and Splunk ES.
• Solid understanding of MITRE ATT&CK and incident response.

Responsibilities

• Oversee the operational delivery of a busy SOC and remain hands-on with investigations.
• Lead major incident investigations and technical response activities.
• Coach and develop SOC analysts with real-time guidance.
• Collaborate with engineering teams to enhance detection capabilities.

Skills

SOC Shift Lead

Senior SOC Analyst

SOC Team Lead

Incident Response

Threat Hunting

MITRE ATT&CK

Security Operations

Active SC Clearance

DV eligibility

British Citizenship

Tools

Microsoft Sentinel

Splunk Enterprise Security

Job description

• Package of up to £78,000 Depending on Experience
• Full time onsite role – shift work
• Active SC clearance required, and you must be eligible for DV

ABOUT THE CLIENT

Our client is a well-established cyber security organisation delivering managed security services to customers operating within highly secure and mission critical environments.

They continue to invest heavily in their Security Operations Centre capability and are now looking for an experienced SOC Shift Lead to strengthen their technical leadership team.

THE BENEFITS

• Opportunity to work on high-profile security operations
• Career progression within a growing cyber security team
• Ongoing technical training and certification support
• Exposure to enterprise and critical national infrastructure environments

THE SOC SHIFT LEAD ROLE

As SOC Shift Lead, you will oversee the operational delivery of a busy Security Operations Centre while remaining hands‑on with technical investigations. You will act as the senior escalation point during your shift, leading incident response, mentoring analysts and ensuring high standards across investigations.

You will also:

• Lead Major Incident investigations and technical response activities
• Analyse advanced network, endpoint and cloud security events
• Drive improvements to detection logic and operational processes
• Coach and develop SOC Analysts through real‑time guidance and regular feedback
• Work closely with engineering teams to enhance detection capabilities

SOC SHIFT LEAD ESSENTIAL SKILLS

• Previous experience as a Senior SOC Analyst, SOC Team Lead or SOC Shift Lead
• Strong experience leading complex cyber security investigations
• Commercial experience with Microsoft Sentinel and Splunk Enterprise Security
• Excellent understanding of MITRE ATT and CK, incident response and threat‑informed defence
• Strong networking knowledge including TCP/IP, DNS, HTTP/S, SMTP, LDAP and VPN technologies
• Experience analysing Windows, Linux, endpoint, identity, network and cloud security logs
• Ability to mentor and develop technical teams
• Active SC Clearance, eligibility for DV and Sole British Citizenship

KEY SKILLS

SOC Shift Lead, SOC Team Lead, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk Enterprise Security, Incident Response, MITRE ATT and CK, Threat Hunting, Security Operations, Active SC Clearance, NSD