SOC Shift Lead (Cyber)

Searchability; Hemel Hempstead; On-site; GBP 70,000 - 86,000; Full time

Job summary

Searchability is seeking a SOC Shift Lead in Hemel Hempstead, UK. The role is a full-time onsite position requiring Active SC clearance and eligibility for DV.

You will oversee a busy Security Operations Centre, lead major incident investigations, mentor analysts and collaborate with engineering to enhance detection capabilities. The successful candidate will analyse network, endpoint and cloud security events, drive improvements to detection logic, and act as the senior escalation point during

Qualifications

• Experience leading complex cyber security investigations.
• MITRE ATT&CK framework and incident response experience.

Responsibilities

• Lead Major Incident investigations and technical response activities.
• Analyse advanced network, endpoint and cloud security events.
• Drive improvements to detection logic and operational processes.
• Coach and develop SOC Analysts through real-time guidance and feedback.
• Work closely with engineering teams to enhance detection capabilities.

Skills

SOC Shift Lead

SOC Team Lead

Senior SOC Analyst

Microsoft Sentinel

Splunk Enterprise Security

MITRE ATT&CK

Threat Hunting

Security Operations

Active SC Clearance

TCP/IP

DNS

HTTP/S

SMTP

LDAP

VPN technologies

Tools

Microsoft Sentinel

Splunk Enterprise Security

Job description

SOC Shift Lead – Hemel Hempstead, UK

• Package of up to £78,000 Depending on Experience


• Full time onsite role – shift work


• Active SC clearance required, and you must be eligible for DV

ABOUT THE CLIENT

Our client is a well-established cyber security organisation delivering managed security services to customers operating within highly secure and mission critical environments.

They continue to invest heavily in their Security Operations Centre capability and are now looking for an experienced SOC Shift Lead to strengthen their technical leadership team.

THE BENEFITS

• Opportunity to work on high-profile security operations


• Career progression within a growing cyber security team


• Ongoing technical training and certification support


• Exposure to enterprise and critical national infrastructure environments

THE SOC SHIFT LEAD ROLE

As SOC Shift Lead, you will oversee the operational delivery of a busy Security Operations Centre while remaining hands-on with technical investigations. You will act as the senior escalation point during your shift, leading incident response, mentoring analysts and ensuring high standards across investigations.

You will also:

• Lead Major Incident investigations and technical response activities


• Analyse advanced network, endpoint and cloud security events


• Drive improvements to detection logic and operational processes


• Coach and develop SOC Analysts through real-time guidance and regular feedback


• Work closely with engineering teams to enhance detection capabilities

SOC SHIFT LEAD ESSENTIAL SKILLS

• Previous experience as a Senior SOC Analyst, SOC Team Lead or SOC Shift Lead


• Strong experience leading complex cyber security investigations


• Commercial experience with Microsoft Sentinel and Splunk Enterprise Security


• Excellent understanding of MITRE ATT and CK, incident response and threat-informed defence


• Strong networking knowledge including TCP/IP, DNS, HTTP/S, SMTP, LDAP and VPN technologies


• Experience analysing Windows, Linux, endpoint, identity, network and cloud security logs


• Ability to mentor and develop technical teams


• Active SC Clearance, eligibility for DV and Sole British Citizenship

By applying for this role, you give express consent for us to process and submit (subject to required skills) your application to our client in conjunction with this vacancy only.

KEY SKILLS

SOC Shift Lead, SOC Team Lead, Senior SOC Analyst, Security Operations Centre, Microsoft Sentinel, Splunk Enterprise Security, Incident Response, MITRE ATT and CK, Threat Hunting, Security Operations, Active SC Clearance, NSD