SOC Lead

Work on Technology That Protects What Matters

At SiXworks, we build secure digital solutions that support Defence and National Security missions. Our teams work on complex problems where reliability, security, and speed of innovation matter.

We’re looking for a SOC Lead who enjoys solving difficult technical challenges and wants their work to have real operational impact.

As a SOC Lead, you’ll lead the everyday operation, development, and continuous improvement of the 24/7 Consolidated Security Operations Centre (SOC). You will be responsible for overseeing all Consolidated SOC functions, managing a team, and ensuring the delivery of high-quality SOC services including 1st-3rd line Security monitoring and alert analysis, threat detection, incident management and response, and where required threat hunting services.

Your work may include:

• Run the day to day operations of the 24/7 Consolidated SOC in line with customer requirements and SiXworks Security practices. Consolidated Define and execute the SOC strategy aligned with organisational security goals.
• Recruit, Train, and manage Consolidated SOC Analysts including developing shift schedules, forecasting and approving work hours.
• Provide mentoring, performance feedback, and development opportunities of the Consolidated SOC Analysts
• Oversee the design, implementation, and optimisation of Consolidated SOC processes, tools, and technologies in conjunction with the external customers and the SiXworks SOC manager.
• Define, develop and improve the Consolidated SOC Operating Procedures KPIs, SLAs to meet customers requirements provide and appropriate reporting for executive leadership.
• Collaborate with threat intelligence, risk management, and compliance teams.
• Ensure 24/7 operational readiness and effective incident response capabilities for the Consolidated SOC
• Manage the technical and security aspects of the Consolidated SOC directly with customers on consolidated SOC-related contracts.
• Drive innovation and continuous improvement in Consolidated SOC operations and threat detection capabilities.
• Lead Consolidated SOC incident response efforts and post-incident reviews in conjunction with the SOC Manager.
• Coordinate with all teams during critical incidents.
• Ensure compliance of the Consolidated SOC with relevant standards (e.g., ISO 27001, SOC 2, NIST, GDPR).
• Provide regular reporting to leadership on Consolidated SOC metrics, trends, and risks.

We value people who take ownership, think critically, and enjoy working as part of a collaborative team tackling complex challenges. You don’t need to tick every box, but we’re particularly interested in people with skills/experience in:

• Bachelor’s in Science, or related field.
• Excellent communication, leadership, and stakeholder management skills.
• 8+ years of experience in cybersecurity, with at least 3 years in a SOC leadership role.
• Strong knowledge of SIEM, SOAR and EDR
• Familiarity with threat intelligence frameworks (e.g MITRE ATT&CK, STIX/TAXII).
• Proven incident response and crisis management experience.
• Proven experience in managing SOC teams.
• Relevant certifications (e.g., CISSP, CISM, GIAC, CSPA,) preferred.

Just as important are curiosity, strong problem solving ability, and the motivation to continuously improve how technology is designed and delivered.

SiXworks is a specialist digital innovation partner delivering secure, mission-critical technology to Defence and National Security organisations. We focus ondigital experimentation, secure-by-design architecture, cloud technologies, and rapid application development to help our customers move faster and stay ahead of evolving challenges.

Our team combines expertise from across technology, business, and operational…