SOC Operations Technical Lead

UK Wide | Remote/Hybrid | Up to £70,000 + Car Allowance

I’m currently supporting a leading Cyber Security Services organisation in their search for a SOC Operations Technical Lead.

This is a key hire within an established Security Operations function and would suit someone who enjoys remaining technically hands‑on whilst also mentoring analysts, engaging with customers, and driving operational improvements.

The successful candidate will act as the senior technical escalation point for the SOC, helping shape detection capabilities, incident response processes, threat hunting activities, and overall service delivery.

• Leading and mentoring a team of SOC analysts within a 24/7 environment
• Acting as the senior escalation point for complex security incidents
• Driving threat hunting, detection engineering, and response activities
• Working closely with Security Engineering, Incident Response and Threat Intelligence teams
• Supporting customers with technical guidance and security recommendations
• Improving SOC processes, playbooks, automation and operational effectiveness
• Helping develop analyst capability through coaching and technical training

• Strong background within Security Operations (SOC)
• Experience leading or mentoring security analysts
• Hands‑on expertise with Microsoft Sentinel and Crowd Strike
• Incident response, threat hunting and detection engineering experienceSIEM, EDR/XDR and security monitoring expertise
• Strong stakeholder management and customer‑facing communication skills
• Ability to communicate effectively with both technical and non-technical audiences
• Experience with in an MSSP, Managed Service or consulting environment highly desirable

• Up to £70,000 base salary
• Car allowance available
• UK-wide opportunity with flexible working arrangements
• SC Clearance eligibility required
• Immediate requirement with interview process underway

This is an excellent opportunity for someone looking to step into a highly visible technical leadership role where they can influence both the operational and strategic direction of a growing cyber security function.