Senior SOC Manager – Managed Cyber Defence

Line of Service

Assurance

Not Applicable

Risk

Senior Manager

We are seeking a Senior Manager to lead the day-to-day technical delivery of our Managed Cyber Defence services. This role has direct responsibility for Analysis and Engineering teams, ensuring the effective running, stability, and continuous improvement of a 24/7 client facing cyber defence capability.

The role will focus on the operational delivery of services across a range of security platforms, including Microsoft Defender/Sentinel, Palo Alto Networks Cortex XDR/XSIAM, Google Sec Ops & Crowd Strike Falcon.

You will play a key role in ensuring services are efficient, resilient, and continuously improving - working closely with internal teams to evolve detection, response, and automation capabilities.

• Lead day‑to‑day operations across Analysis and Engineering teams delivering Managed Cyber Defence services.
• Ensure service stability, performance, and quality across client environments, acting as a senior escalation point for incidents and technical issues.
• Manage prioritisation and workload across teams, including leadership of complex client incidents and investigations.
• Own and optimise the security technology stack (primarily Microsoft Sentinel and Defender), driving effective use of AI and automation in the SOC.
• Identify opportunities to improve efficiency through automation and work closely with automation teams to evolve capabilities.
• Oversee operational reporting and support ongoing client interactions related to service delivery and performance.
• Provide technical leadership, maintain awareness of relevant security technologies, and drive continuous improvements in detection, response, and key SOC metrics (MTTD, MTTR, automation coverage).

• You have experience of embedding AI tooling within a SOC environment
• Experience with Microsoft Sentinel and Defender and strong knowledge of KQL.
• Experience in SOC, XDR, or managed security environments.
• Familiarity with Palo Alto, Crowd Strike, or Google tools is beneficial.
• Security operations, incident response, detection engineering.
• Cloud (Azure preferred), automation concepts.
• Experience leading technical teams in live service environments.
• Desirable: SC-200 and/or GIAC certifications.

No matter where you may be in your career or personal life, our benefits are designed to add value and support, recognising and rewarding you fairly for your contributions.

• We offer a range of benefits including empowered flexibility and a working week split between office, home and client site; private medical cover and 24/7 access to a qualified virtual GP; six volunteering days a year and much more.

Degrees/Field of Study required:
Degrees/Field of Study preferred:

• Accepting Feedback
• Accepting Feedback
• Active Listening
• Analytical Thinking
• Cloud Security
• Coaching and Feedback
• Communication
• Conducting Research
• Creativity
• Cyber Defense
• Cyber Threat Intelligence
• Embracing Change
• Emotional Regulation
• Empathy
• Encryption
• Inclusion
• Influence
• Information Security
• Intellectual Curiosity
• Intelligence Analysis
• Intelligence Report
• Intrusion Detection
• Intrusion Detection System (IDS)
• IT Operations
• Learning Agility {+ 24 more}

Up to 20%

No

Yes