SOC Shift Lead

Sopra Steria; Hemel Hempstead, Farnborough; On-site; GBP 58,500 - 71,500; Full time

Benefits offered by this job

25 days annual leave

Health cash plan

Life assurance

Pension

Job summary

Sopra Steria is seeking a Lead SOC Analyst to head a 24/7 Security Operations Centre in the UK. You will remain hands‑on while guiding investigations, incident response and threat hunting across multiple client environments.

You’ll mentor analysts, drive detection improvements, and collaborate with stakeholders to strengthen security capabilities. Role is on‑site in Hemel Hempstead or Farnborough with DV/SC clearance eligibility.

Qualifications

• Experience in leading SOC teams or senior analyst roles.
• Strong incident response and threat hunting skills.
• Clearance eligibility is required (SC/DV).

Responsibilities

• Lead and inspire a team of SOC Analysts within a fast‑paced 24/7 Security Operations Centre.
• Take ownership of major security incidents, acting as the primary escalation point for high‑priority threats.
• Hunt, investigate and respond to sophisticated cyber attacks across client environments.
• Analyse network traffic, endpoint activity, logs and alerts to uncover malicious behaviour.
• Drive continuous improvement of detection capabilities aligned to the MITRE ATT&CK framework.
• Enhance SOC processes, tooling, playbooks and operational effectiveness.
• Mentor and develop analysts, helping build the next generation of cyber security talent.
• Represent the SOC in operational discussions with stakeholders, partners and customers.

Skills

SOC operations

Incident detection & response

MITRE ATT&CK knowledge

SIEM (Microsoft Sentinel, Splunk)

Mentoring/leading analysts

Scripting (Python/PowerShell/Bash)

Tools

Microsoft Sentinel

Splunk

Job description

Lead SOC Analyst – Sopra Steria

Lead the Defenders. Hunt the Threats. Protect What Matters.

Cyber threats don't sleep – and neither do the teams that stop them. At Sopra Steria, our Security Operations Centre stands on the front line of cyber defence, protecting some of the UK's most critical organisations. As we continue to grow our managed security services, we're looking for an experienced Lead SOC Analyst to take charge of a high‑performing team and help shape the future of our 24/7 Cyber Security Operations capability.

This is more than a leadership role. You'll remain hands‑on in the fight against cyber threats, leading investigations, driving incident response, mentoring analysts, and strengthening our detection and response capabilities across multiple complex client environments.

Whether you're already leading a SOC team or you're a senior analyst ready to take the next step, this is your opportunity to make a real impact in a mission‑critical security environment.

Location & Work Details

Office based: Hemel Hempstead OR Farnborough

Clearance: Eligible for SC and DV Clearance

Shift based: 2 × 6am to 6pm; 2 × 6pm to 6am; 4 days off.

What You'll Be Doing

• Lead and inspire a team of SOC Analysts within a fast‑paced 24/7 Security Operations Centre.
• Take ownership of major security incidents, acting as the primary escalation point for high‑priority threats.
• Hunt, investigate and respond to sophisticated cyber attacks across client environments.
• Analyse network traffic, endpoint activity, logs and alerts to uncover malicious behaviour.
• Drive continuous improvement of detection capabilities aligned to the MITRE ATT&CK framework.
• Enhance SOC processes, tooling, playbooks and operational effectiveness.
• Mentor and develop analysts, helping build the next generation of cyber security talent.
• Represent the SOC in operational discussions with stakeholders, partners and customers.

What You'll Bring

• Proven experience working within a Security Operations Centre (SOC).
• Strong incident detection, investigation and response experience.
• Deep understanding of network and host‑based attack techniques.
• Hands‑on experience with SIEM technologies such as Microsoft Sentinel or Splunk.
• Experience leading, coaching or mentoring analysts in an operational security environment.

It Would Be Great If You Had

• Detection engineering or threat‑informed defence experience.
• MITRE ATT&CK framework knowledge.
• Python, PowerShell or Bash scripting skills.
• Malware analysis or reverse engineering exposure.
• CREST, Blue Team Level 1 or similar cyber security certifications.

If you are interested in this role but are not sure if your skills and experience are exactly what we’re looking for, please do apply – we’d love to hear from you!

Employment Details

Employment Type: Permanent

Location: Hemel Hempstead OR Farnborough

Security Clearance Level: Eligible for DV and SC Clearance.

Internal Recruiter: Jane

Salary: Up to £65 K plus shift allowance

Benefits: 25 days annual leave with the choice to buy additional holiday days, health cash plan, life assurance, and pension.

We welcome applications from people with diverse backgrounds and identities, and we are committed to equality of opportunity for all. We do not discriminate on the basis of race, religion, colour, gender, age, disability, sexual orientation, or marital status. If you require adjustments to the recruitment process, please let us know. We are part of the Disability Confident scheme and will offer an interview to eligible candidates with a disability.