SOC Shift Lead - Internet Service Provider

Hamilton Barnes Associates Limited; West Yorkshire; On-site; GBP 39,000 - 55,000; Full time

Job summary

Hamilton Barnes Associates Limited is seeking a SOC Shift Lead to oversee daily SOC shift activities and act as the primary escalation point for complex incidents. You will ensure SLA compliance, provide technical mentorship to analysts, and support threat hunting to improve service delivery.

The role requires strong communication skills, experience in alert triage, and the ability to coordinate with internal teams and customers.

Qualifications

• Minimum 3+ years of SOC operations experience.
• Experience with ITSM platforms such as ServiceNow.
• Proficient in Microsoft Sentinel and Defender XDR.
• Experience mentoring analysts and driving training.
• Strong focus on incident triage, escalation and customer communication.

Responsibilities

• Run shift operations, ensuring SLAs and high-quality incident handling; set shift agendas and address staffing issues.
• Review and prioritise new alerts; own high-priority incidents and escalate when required.
• Conduct regular QA of tickets to ensure SOC procedures and documentation standards.
• Mentor SOC Analysts with feedback and targeted training.
• Contribute to threat-hunting activities and post-incident reviews; assist monthly reporting.

Skills

SOC operations

SOC triage

Shift Lead

Escalation decisions

Customer comms

ITSM

Mentorship

Alerts & incident analysis

Tools

ServiceNow

Microsoft Sentinel

Defender XDR

SentinelOne

Job description

Ready to take the next step in your career?

Join a leading managed service provider specializing in modernizing and securing critical enterprise infrastructure.The organization simplifies technical service management across cloud,network,and cybersecurity platforms,enabling global clients to streamline operations.

The company is inviting applications from experienced professionals for the role of SOC Shift Lead.The successful candidate will oversee daily security operations center shift activities,acting as the key escalation point for complex technical incidents while ensuring SLA compliance.Key responsibilities include conducting quality assurance reviews,providing technical mentorship to analysts,and maintaining clear stakeholder communication.Additionally,the ideal candidate will support threat-hunting activities and process refinements to continuously improve service delivery.

Responsibilities

• Run shift operations, ensuring compliance with SLAs and maintaining high-quality incident handling. Set shift agendas, balance workloads, and promptly address any process or staffing issues. Maintain effective, customer-centric communication with internal teams (including Security Optimization and Engineering), customers, and incident response partners.
• Review and prioritize new alerts, taking initial ownership of high-priority or complex incidents, and ensuring proper escalation to customers and Senior SOC Analysts. Make sound, data-driven decisions to facilitate effective triage, investigation, and escalation in line with operational standards.
• Conduct regular quality assurance (QA) of tickets to ensure SOC procedures and documentation standards are met, providing clear, constructive feedback to team members to improve technical skills and workflow consistency.
• Mentor SOC Analysts by offering regular, constructive feedback on triage processes and best practices. Encourage targeted training initiatives, including relevant certifications, to support career progression within the SOC.
• Contribute to ongoing service improvements through participation in threat-hunting activities led by Senior SOC Analysts, rule tuning, and process refinement initiatives. Assist with monthly reporting and post-incident reviews to drive continuous performance enhancements.

Skills/Must Have

• A minimum of 3+ years of SOC operational experience, demonstrating a strong background in alert triage, incident analysis and escalation
• ITSM/ticketing platforms (such as ServiceNow) and processes (ticket prioritisation, SLAs etc)
• Microsoft - including Sentinel and Defender XDR
• SentinelOne - including both endpoint and AI SIEM
• Triaging and investigating incidents as a SOC Analyst
• Shift Lead management, including chairing shift meetings, monitoring SLAs, quality assuring tickets and mentoring/coaching other analysts
• Escalation decision making
• Customer focused and able to communicate (both written and verbal)

Salary

• £38,500 plus 20% shift allowance