SOC Technical Lead

I’m working with a growing MSP who are looking for an experienced SOC Level 3 Analyst /Technical Lead to join their growing Security Operations Centre. This is a days only role

This is a senior technical role for someone who enjoys getting hands-on with complex incidents, leading investigations and helping shape SOC capability.

You will be the escalation point for major security incidents, supporting customers through critical events while also driving improvements across detection, threat hunting and security tooling.

• Lead complex incident investigations including ransomware, data breaches and advanced threats
• Manage incidents from detection through containment, remediation and recovery
• Act as the senior technical escalation point within the SOC
• Carry out threat hunting and improve detection capabilities across SIEM and EDR platforms
• Support security tooling improvements, automation and SOC processes
• Mentor and develop junior analysts

• 5+ years’ experience within SOC, Incident Response or MSSP environments
• Strong background leading major incident investigations
• Advanced SIEM and EDR experience (Crowd Strike highly desirable)
• Experience with threat hunting, malware analysis and forensic investigations
• Strong knowledge of attacker techniques, MITRE ATT&CK and modern cyber threats
• Confident communicating technical issues to senior stakeholders

This is a great opportunity for a senior SOC professional who wants to take ownership, influence technical direction and work on some of the most challenging security incidents.