SOC Team Lead

Jobtailor; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Jobtailor, based in Greater London, seeks a Senior Cyber Security Operations Manager to drive performance across Shared Service's Cyber Services. You will act as a technical escalation point and line manager, guiding teams through incident response, threat analysis, and security assurance activities.

You will foster a proactive culture of cyber hygiene, collaborate across departments, and oversee reporting on security metrics, incident trends, and risk controls.

Qualifications

• Hands-on cybersecurity experience in a service desk or SOC environment.
• Knowledge of incident response frameworks, threat detection, and mitigation.
• Experience guiding teams under high-pressure scenarios.
• Experience with SIEM, EDR and vulnerability management platforms.
• Understanding of risk-based prioritisation and regulatory compliance.

Responsibilities

• Drive performance and operational excellence across Cyber Services.
• Act as a technical escalation point and line manager.
• Support threat analysis, incident response, and security assurance activities.
• Foster proactive cyber hygiene and continuous improvement.
• Lead cyber service operations focused on SLA attainment and incident response.
• Line manage Cyber Analysts and provide development plans.

Skills

Cybersecurity operations management

Incident response

Threat analysis

Threat hunting strategies

Leadership and guidance

Communication

Education

CompTIA Security+

CISSP

Tools

SIEM

EDR

Sentinel

Defender

Splunk

CrowdStrike

Job description

• Drive performance and operational excellence across Shared Service’s Cyber Services function
• Act as a technical escalation point and line manager
• Support threat analysis, incident response, and security assurance activities
• Foster a proactive culture of cyber hygiene and continuous improvement
• Collaborate across departments to strengthen Shared Service's security posture
• Deputise for the Service Desk Manager during high workload or absence periods
• Lead cyber service operations focused on SLA attainment, incident response, and resolution quality
• Oversee daily workflow distribution and prioritise emerging threats and investigative escalations
• Ensure complex or unresolved cybersecurity issues are escalated appropriately
• Line manage Cyber Analysts, set objectives, and support development plans
• Share threat intelligence and cyber knowledge with junior colleagues
• Provide training and coaching on cyber operations tooling and security practices
• Contribute to root cause analysis and threat hunting strategies
• Ensure cyber processes are documented, reviewed, and updated
• Support reporting on security metrics, incident trends, and cyber control performance
• Collaborate on service reviews concerning cyber operations and risk assurance
• Work with the Service Desk Manager, Service Delivery Managers, Principal Cyber Analyst, and Technical Architect
• Build relationships with internal stakeholders, customers, and external security partners
• Contribute to security playbooks, standard operating procedures, and escalation pathways
• Champion a security-first mindset across Shared Service operations

Requirements

• Hands-on experience in a cybersecurity or service desk environment
• Knowledge of incident response frameworks, threat detection, and mitigation strategies
• Strong leadership and communication skills with the ability to guide teams in high-pressure scenarios
• Experience working with SIEM, EDR, and vulnerability management platforms
• Understanding of risk-based prioritisation and regulatory compliance considerations
• Willingness to support out-of-hours activities based on threat levels or response needs
• Desirable: certifications such as CompTIA Security+, CISSP, or equivalent
• Desirable: coaching and mentoring experience within cyber or support teams
• Desirable: familiarity with Sentinel, Defender, Splunk, or CrowdStrike
• Desirable: experience contributing to GRC or ISO standards
• Desirable: knowledge of ITIL, NIST, or MITRE ATT&CK frameworks
• Desirable: understanding of customer impact and stakeholder management within cyber contexts
• Awareness of applicable regulations and frameworks such as NCSC, NIST, ISO27001, and Cyber Essentials Plus

Core Competencies

Demonstrates expertise in cybersecurity operations, incident response, and threat analysis while fostering a proactive culture of cyber hygiene. Capable of leading teams, managing complex cybersecurity issues, and ensuring compliance with industry standards.

Highest-signal resume keywords

• Cybersecurity Operations Management
• Incident Response Frameworks
• SIEM and EDR Platforms
• Leadership and Team Guidance
• Regulatory Compliance Knowledge

Hard Skills

• Incident Response
• Threat Detection
• Vulnerability Management
• Root Cause Analysis
• Threat Hunting Strategies
• Cybersecurity Documentation
• Security Metrics Reporting
• Cyber Operations Tooling
• Risk-Based Prioritization
• Continuous Improvement

Soft Skills

• Strong Leadership
• Effective Communication
• Coaching and Mentoring
• Relationship Building
• Stakeholder Management

Certifications & Qualifications

• CompTIA Security+
• CISSP

Industry Keywords

• Cyber Hygiene
• NIST
• ISO27001
• Cyber Essentials Plus
• GRC
• ITIL
• MITRE ATT&CK
• NCSC

Tools & Technologies

• SIEM
• EDR
• Sentinel
• Defender
• Splunk
• CrowdStrike