SOC Team Lead

ImmigrationGPT; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Autonomy to grow skills

Flexible working (hybrid/remote)

Private medical insurance

25 days annual leave + bank holidays

Job summary

Methods Business and Digital Technology in London seeks a SOC Team Lead to drive performance and oversee cyber operations. You will manage incident response, threat analysis, and governance while guiding a skilled team and collaborating with stakeholders across the organization.

The role requires hands-on cyber experience, strong leadership, and the ability to coordinate across departments to enhance security posture. Flexible working options are available.

Qualifications

• Hands-on experience in a cybersecurity or service desk environment.
• Knowledge of incident response frameworks, threat detection, and mitigation strategies.
• Willingness to support out-of-hours activities based on threat levels or response needs.

Responsibilities

• Lead cyber service operations with focus on SLA attainment, incident response, and resolution quality.
• Oversee daily workflow distribution, prioritising emerging threats and investigative escalations.
• Maintain awareness of regulatory frameworks (e.g. NCSC, NIST, ISO27001, Cyber Essentials Plus).
• Support report production for security metrics, incident trends, and cyber control performance.

Skills

Cybersecurity leadership

Incident response

Threat analysis

Stakeholder comms

Tools

SIEM

EDR

Vulnerability mgmt

Job description

# SOC Team LeadMethods Business and Digital Technology, LondonApply on Methods Business and Digital Technology's site Check my CV against this jobPosted: 5 days agoContract: permanentListed on: Direct from the employer## Can this job be sponsored?Some things to check* We could not tell the occupation from the title. Whether a job can be sponsored depends on its occupation code. Look up the occupation code (CASCOT)* Methods Business and Digital Technology holds an A-rated Skilled Worker licence. Register of licensed sponsors, GOV.UKRead from the advert, the Home Office register and the Immigration Rules. Whether you can be sponsored also depends on your own circumstances, such as your age and visa history. This is information, not advice.AdvertisementDiscover moreJobsBrowse Careersjob## About the jobSince our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK.Our mission is to improve and safeguard public-facing services. We apply digital thinking to ensure the future of our public services is centered around our citizens. Our human touch sets us apart from other consultancies, system integrators and software houses - we have a customer-centric value system whereby we focus on delivering what is right for our clients.We passionately support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them.Methods are experts in delivering secure, resilient cyber and information services – keeping systems and data safe. We help reduce risk and vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks. The SOC Team Lead drives performance and operational excellence across Shared Service’s Cyber Services function. Acting as both a technical escalation point and line manager, they support the team in threat analysis, incident response, and security assurance activities. They foster a proactive culture of cyber hygiene and continuous improvement while collaborating across departments to strengthen Shared Service's security posture. The Team Leader also deputises for the Service Desk Manager during high workload or absence periods. RequirementsOperational Oversight & Incident Coordination - Lead cyber service operations with focus on SLA attainment, incident response, and resolution quality - Oversee daily workflow distribution, prioritising emerging threats and investigative escalations - Ensure unresolved or complex cybersecurity issues are escalated appropriately, internally and externally - Maintain awareness of all applicable regulations and frameworks (e.g. NCSC, NIST, ISO27001, Cyber Essentials Plus) Team Leadership & Development - Line manage Cyber Analysts, setting objectives and supporting individual development plans - Model desired behaviours that promote collaboration, precision, and accountability - Share threat intelligence and cyber knowledge with junior colleagues - Provide training and coaching on cyber operations tooling and security practices Governance & Reporting - Contribute to root cause analysis and threat hunting strategies - Ensure all cyber processes are documented, regularly reviewed, and updated - Support report production for security metrics, incident trends, and cyber control performance - Collaborate on service review inputs relating to cyber operations and risk assurance Strategic Collaboration - Work closely with the Service Desk Manager, Service Delivery Managers, Principal Cyber Analyst, and Technical Architect - Foster strong relationships with internal stakeholders, customers, and external security partners - Contribute to development of security playbooks, standard operating procedures, and escalation pathways - Champion a security-first mindset across Share Service operations Essential - Hands-on experience in a cybersecurity or service desk environment - Knowledge of incident response frameworks, threat detection, and mitigation strategies - Strong leadership and communication skills with the ability to guide teams in high-pressure scenarios - Experience working with SIEM, EDR, and vulnerability management platforms - Understanding of risk-based prioritisation and regulatory compliance considerations - Willingness to support out-of-hours activities based on threat levels or response needs Desirable - Certifications such as CompTIA Security+, CISSP, or equivalent - Coaching and mentoring experience within cyber or support teams - Familiarity with security tooling such as Sentinel, Defender, Splunk, or CrowdStrike - Experience contributing to GRC (Governance, Risk, Compliance) or ISO standards - Knowledge of ITIL, NIST, or MITRE ATT&CK frameworks - Understanding of customer impact and stakeholder management within cyber contexts BenefitsMethods is passionate about its people; we want our colleagues to develop the things they are good at and enjoy.By joining us you can expect- Autonomy to develop and grow your skills and experience- Be part of exciting project work that is making a difference in society- Strong, inspiring and thought-provoking leadership- A supportive and collaborative environmentDevelopment – access to LinkedIn Learning, a management development programme, and trainingWellness – 24/7 confidential employee assistance programmeFlexible Working – including home working and part timeSocial – office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays, and commitment to charitable causesTime Off – 25 days of annual leave a year, plus bank holidays, with the option to buy 10 extra days each yearVolunteering – 2 paid days per year to volunteer in our local communities or within a charity organisationPension – Salary Exchange Scheme with 4% employer contribution and 5% employee contributionLife Assurance – of 4 times base salaryPrivate Medical Insurance – which is non-contributory (spouse and dependants included)Worldwide Travel Insurance – which is non-contributory (spouse and dependants included)Enhanced Maternity and Paternity PayTravel – season ticket loan, cycle to work schemeFor a full list of benefits please visit our website (www.methods.co.uk/careers/benefits)