SOC Shift Lead – Cyber Security - REF 1257

Interface Recruitment; West Yorkshire, Leeds; Hybrid; GBP 45,000 - 65,000; Full time

Benefits offered by this job

25 days holiday

Pension (5% employer)

Healthcare

DIS x 4

Birthday off

Paid training

Job summary

Interface Recruitment is recruiting a SOC Shift Lead for a growing UK security operations centre in Leeds. The role combines hands-on incident triage with mentoring, escalation, and shift leadership responsibilities, guiding a small team of Associate SOC Analysts during your shift.

You'll manage workloads, SLAs, and ticket quality, coordinate shift handovers, and develop analysts through coaching. The position requires experience in security operations, strong communication with customers, and

Qualifications

• Experience in operational Security Operations.
• Mentoring or escalation experience preferred.
• Able to communicate with customers clearly and professionally.

Responsibilities

• Leading and coordinating SOC activity (mainly L1) during shift.
• Chairing shift meetings, briefings and handovers.
• Monitoring workloads and ensuring SLAs are achieved.
• Triaging and investigating security incidents.
• Taking ownership of higher-priority or complex alerts.
• Quality assuring analysts' tickets and investigations.
• Reviewing customer communications for technical accuracy.
• Coaching and mentoring Associate SOC Analysts.
• Providing constructive technical and operational feedback.
• Supporting threat hunting and detection rule tuning.
• Identifying recurring issues and improving SOC processes.
• Working closely with Senior SOC Analysts and Security Engineering teams.

Skills

SOC

Job description

SOC Shift Lead – Cyber Security – REF 1257

This is a 24/7/365 SOC operating a rotating: 4 days on - 4 days off - 4 nights Shifts run: 7:00am – 7:00pm / 7:00pm – 7:00am

Contact number

0113 299 0570

Region

Hybrid / West Yorkshire

Additional Benefits

25 Days Hols (rising to 27 + Buy and Sell scheme) - Pension (5% Employer) - Healthcare - DIS x 4

Critical Illness - Birthday off - Lots of paid training

Qualifications

Any MS Security would be beneficial

Skills

SOC

We're supporting a leading UK technology and managed security services organisation with the continued expansion of its Security Operations Centre in Leeds and are looking to recruit two SOC Shift Leads.

This is an excellent opportunity for an experienced SOC Analyst who enjoys the technical side of Security Operations but has also naturally progressed into mentoring, escalation, quality assurance or shift leadership responsibilities.

You'll lead a team of Associate SOC Analysts during your shift, remaining hands-on with incident triage and investigation whilst taking responsibility for workloads, SLAs, escalation decisions, ticket quality and the ongoing development of the analysts around you.

The Role

You'll be responsible for the effective day-to-day running of your SOC shift, acting as the first point of escalation for analysts and ensuring incidents are correctly prioritised, investigated, documented and communicated.

This is still very much an operational Security role rather than a move away from the technology. You'll regularly get involved with more complex or higher-priority incidents whilst providing guidance to less experienced analysts and deciding when further escalation is required.

Responsibilities will include:

• Leading and coordinating SOC activity (mainly L1) throughout your shift
• Chairing shift meetings, briefings and handovers
• Monitoring workloads and ensuring SLAs are achieved
• Triaging and investigating security incidents
• Taking ownership of higher-priority or more complex alerts
• Quality assuring analysts' tickets and investigations
• Reviewing customer communications for technical accuracy and clarity
• Coaching and mentoring Associate SOC Analysts
• Providing constructive technical and operational feedback
• Supporting threat hunting and detection rule tuning
• Identifying recurring issues and opportunities to improve SOC processes
• Working closely with Senior SOC Analysts and Security Engineering teams

The Shift Leads will lead the Associate / Level 1 SOC Analysts whilst on shift , rather than this being a traditional people-management position.

Technology Environment

We're particularly interested in candidates with experience across:

• Microsoft Sentinel
• SentinelOne, including Endpoint and AI SIEM
• SIEM / EDR / XDR platforms
• ITSM and ticketing platforms such as ServiceNow
• Incident triage and investigation
• Ticket prioritisation and SLA management
• MITRE ATT&CK
• Windows and Linux
• TCP/IP, DNS, VPN and SSL/TLS
• Detection and alert correlation
• Security automation / scripting concepts

The hiring team are particularly interested in practical experience with Microsoft Sentinel and Defender XDR alongside SentinelOne, rather than candidates whose experience is primarily theoretical.

What We're Looking For

You'll ideally be an established SOC Analyst with a good grounding in operational Security Operations and experience investigating and escalating real-world security incidents.

Previous experience as a formal Team Lead would be advantageous, but isn't necessarily essential. We'd particularly like to hear from analysts who are already trusted to:

• mentor or coach junior analysts
• review other analysts' tickets
• lead shift handovers or meetings
• monitor SLAs

You'll need to be confident communicating with customers as well as technical teams. Written communication is particularly important, as part of your responsibility will be ensuring investigations and customer-facing tickets are accurate, concise and understandable.

Shift Pattern & Location

This is a 24/7/365 SOC operating a rotating:

4 days on - 4 days off - 4 nights

Shifts run:

7:00am – 7:00pm / 7:00pm – 7:00am

When a day shift falls on a Monday, Wednesday or Friday, you'll need to attend the Leeds office.

You'll be joining an established Security Operations environment with clear opportunities to continue developing technically and progress towards positions such as Senior SOC Analyst.

The organisation actively supports professional development and relevant cyber security certifications, and due to the customers supported you may also be required to obtain SC and/or NPPV clearance.

Do you have proof of your right to work in the UK? *

• Yes

AI assistant For a human, call 0113 299 0570 (Leeds) or 0161 377 3054 (Manchester)