SOC Manager / SOC Team Lead

Salary: £55,000-£65,000 DOE

Location: London

An exciting opportunity to build, lead and develop a new in-house Security Operations Centre (SOC) within a global enterprise organisation.

We're supporting a global organisation as they make a significant investment in their cybersecurity capabilities, transitioning from an outsourced SOC model to a fully integrated, internally managed security operation.

As part of this journey, we're looking for an experienced SOC Manager / SOC Team Lead to take ownership of the day-to-day operation, develop a team of security analysts and help shape the future of the organisation's security monitoring and incident response capabilities.

This is a fantastic opportunity for someone who enjoys combining hands-on technical expertise with people leadership and wants to have a genuine impact on how a SOC is built and operated.

The Role

You'll play a key role in establishing and developing a high-performing SOC function, with responsibilities including:

• Leading, mentoring and developing a team of Tier 1 SOC Analysts operating across a 24/7 environment.
• Supporting the transition from an outsourced SOC provider to an internal security operation.
• Overseeing security monitoring, incident investigation, escalation and response activities.
• Managing and improving SIEM, EDR/XDR and enterprise security monitoring capabilities.
• Developing SOC processes, incident response playbooks, shift handovers and escalation procedures.
• Improving detection capabilities, reducing false positives and introducing automation where appropriate.
• Establishing operational KPIs, SLAs and reporting processes.
• Working closely with senior cybersecurity leadership and IT teams across the business.

What We're Looking For

• 5+ years' experience within cybersecurity operations, SOC environments or incident response.
• At least 2 years' experience leading security analysts or managing SOC operations.
• Strong technical knowledge of SIEM, EDR/XDR and security monitoring technologies.
• Experience managing security incidents, investigations and escalations.
• Good understanding of Microsoft 365 security, endpoint protection, identity and network security.
• Experience developing SOC processes, procedures and operational improvements.
• Familiarity with MITRE ATT&CK, threat intelligence and detection engineering.
• Strong communication skills and a hands-on, collaborative leadership style.

Additional experience that would be beneficial:

• Microsoft Sentinel, Defender XDR and KQL.
• Building an internal SOC or transitioning away from an outsourced SOC/MSSP.
• SOAR and security automation.
• Certifications such as CISSP, CISM, GCIH, GCIA or SC-200.

Why Consider This Opportunity?

• Build something from the ground up – play a central role in developing a new internal SOC.
• Real ownership and influence – shape the people, processes and operational capabilities.
• Global exposure – work across a diverse, international enterprise environment.
• Leadership opportunity – develop your own team and work closely with senior cybersecurity stakeholders.
• Long-term development – contribute to the ongoing maturity of the organisation's cybersecurity function.

If you're an experienced SOC Team Lead or SOC Manager looking for an opportunity where you can make a real difference, we'd love to hear from you.

Apply today or get in touch for a confidential conversation.