SOC Team Lead: Incident Response & Operations

NTT DATA; Greater London; On-site; GBP 75,000 - 110,000; Full time

Job summary

NTT DATA in the United Kingdom is seeking a Security Operations Team Lead to oversee the day-to-day operations of the SOC. You will lead a team of security analysts and engineers to deliver managed security services, respond to incidents, and improve operational performance.

The role focuses on service delivery, incident response, and ensuring efficiency within established frameworks. You will mentor staff, coordinate 24/7 coverage where applicable, and drive improvements through playbooks and

Qualifications

• Minimum 5+ years in a Security Operations Centre or related security environment.
• At least 2 years in a team lead or supervisory role.
• Strong knowledge of incident detection, escalation, and resolution processes.
• Experience with SIEM, IDS/IPS, endpoint protection, and threat intelligence platforms.
• Relevant certifications (e.g., CompTIA Security+, GCIH, SSCP, CEH).

Responsibilities

• Oversee SOC operations and delivery of managed security services to clients.
• Monitor performance against SLAs and KPIs, ensuring high-quality execution.
• Implement incident management, threat monitoring, and vulnerability assessments.
• Serve as escalation point for client concerns and operational issues.
• Conduct reviews and contribute to client reports and communications.
• Coordinate incident response efforts with senior SOC staff.
• Ensure timely detection, escalation, containment, and resolution of incidents.
• Support post-incident reviews and implement recommendations.
• Lead and mentor SOC analysts; organize 24/7 coverage (if applicable).
• Promote knowledge sharing; adhere to playbooks and standards.
• Identify processes improvements; support tools and automation.
• Assist with maturity assessments and track metrics like MT TD and MTTR.
• Collaborate with stakeholders; input into incident summaries and dashboards.
• Stay aware of emerging threats and implement measures.

Skills

SOC leadership

Incident response

Security operations

Communication skills

Tools

SIEM

IDS/IPS

Endpoint protection

Threat intelligence

Job description

NTT DATA in the United Kingdom is seeking a Security Operations Team Lead to oversee the day-to-day operations of the SOC. You will lead a team of security analysts and engineers to deliver managed security services, respond to incidents, and improve operational performance.

The role focuses on service delivery, incident response, and ensuring efficiency within established frameworks. You will mentor staff, coordinate 24/7 coverage where applicable, and drive improvements through playbooks and