Lead SOC: Incident Response & Security Operations

Inchcape; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

Inchcape is seeking a SOC Lead to join our global security operations team. This hands-on cybersecurity leadership role combines incident response expertise and people management to drive a world-class SOC service.

You will lead shifts, act as the escalation point for complex alerts, and mentor SOC Analysts while partnering with the Head of SOC on continuous improvement initiatives across playbooks, detections, and reporting.

Qualifications

• Strong hands-on experience leading SOC operations and investigations.
• Proven incident response capabilities across SIEM/EDR/SOAR and related security tools.
• Ability to coach, mentor and develop SOC analysts and drive improvements.

Responsibilities

• Lead SOC shifts and provide day-to-day operational direction to L1 and L2 SOC Analysts, ensuring alerts, incidents, investigations, handovers and escalations are managed effectively and in line with established SOC procedures.
• Act as the primary technical escalation point for complex security alerts and incidents, applying advanced investigative skills across SIEM, EDR, email security, identity, cloud, endpoint and security monitoring technologies.
• Leverage strong IT infrastructure knowledge to support investigations, identify root causes and drive effective incident resolution.
• Review and quality-assure analyst investigations, case notes, evidence collection, timelines and incident records, ensuring accuracy, consistency and escalation as needed.
• Manage incident and operational escalations, prioritising activity based on risk, threat severity and business impact, with timely updates to stakeholders.
• Act as an escalation point for analysts on the on-call rota, providing technical leadership and decision-making.
• Coach, mentor and develop SOC Analysts, conducting regular one-to-one meetings and fostering a culture of continuous learning.
• Work with Head of SOC to deliver objectives and improve SOC processes, playbooks and detection capabilities.

Skills

SOC operations

Incident response

Leadership

Tools

SIEM

EDR

SOAR

Email security

Identity

Cloud

Endpoint

Ticketing platforms

Job description

Inchcape is seeking a SOC Lead to join our global security operations team. This hands-on cybersecurity leadership role combines incident response expertise and people management to drive a world-class SOC service.

You will lead shifts, act as the escalation point for complex alerts, and mentor SOC Analysts while partnering with the Head of SOC on continuous improvement initiatives across playbooks, detections, and reporting.