Lead SOC Analyst - DV Cleared

YOU MUST HAVE ACTIVE DV CLEARANCE

Lead SOC Analyst
£80 per hour - 42 hour weeks
12 Hour shifts (7am-7pm & 7pm-7am)
7 Days & 7 Nights over a 4-week pattern
6 month contract initially
Buckinghamshire

Summary -  The 3x Lead SOC Analysts will be responsible for the operational leadership of the Security Monitoring function, ensuring the consistent delivery of high-quality security monitoring, investigation and escalation activities.

Responsibilities
Lead theshift-based delivery of Security Monitoring services, ensuring timely and effective monitoring, investigation, triage and escalation of cybersecurity events.

Supervise and coordinate a Senior SOC Analyst, ensuring investigations meet required professional, technical and documentation standards.

Act as Duty Lead for Security Monitoring, providing technical leadership and making operational decisions during live cybersecurity events.

Review and quality-assureSOC investigations, confirming findings are accurate, evidence-based and clearly documented.

Lead complex and high-priority cyber security investigations before escalation to the Incident Response team, as delegated by the Principal SOC Analyst.

Deliver clear and effective shift handovers, maintaining situational awareness and continuity across ongoing investigations and incidents.

Coordinate with Incident Responders during cyber security incidents,clearly communicating analytical findings, timelines, indicators of compromise and supporting evidence.

Collaborate with SOC Engineers to improve monitoring coverage, alert quality and operational effectiveness.

Support the onboarding of new systems, applications and cloud services into SOC monitoring by validating monitoring content and operational readiness.

Drive continuous improvement across monitoring processes, investigation techniques and analyst efficiency, recommending enhancements to the Principal SOC Analyst.

Mentor and coach SOC Analysts, supporting their professional development and promoting consistent analytical standards and investigation best practice.

Ensure compliance with SOC operating procedures, security monitoring standards and information-handling requirements.

Identify and escalate operational issues, monitoring gaps and emerging threats to the Principal SOC Analyst and SOC Manager.

Required Skills / Experience

Demonstrable experience working within a SOC or comparable cyber security operations environment.

Experience leading security monitoring activities and supervising analysts during live operational service.

Strong knowledge of SIEM platforms, log analysis, security monitoring technologies and security event investigation.

Experience investigating complex cyber security events and determining appropriate escalation paths.

Good understanding of cyber-attack techniques, indicators of compromise, threat intelligence and defensive monitoring.

Experience in mentoring or coaching technical staff within an operational environment.

Excellent analytical, investigative and problem-solving skills.

Strong written and verbal communication skills, including the ability to communicate clearly under operational pressure.

Ability to make timely decisions within a fast-paced 24/7 operational environment.

Profession certifications such as Microsoft SC-200, GIAC GCIH, GCIA, CompTIA CySA+ or equivalent.
Desirable:
Experience using Microsoft Sentinel, Log Rhythm, or equivalent enterprise SIEM platforms.

Experience developing monitoring improvements, detection tuning, or operational process development.

Experience supporting Incident Responder activities during major cyber security incidents.

Experience contributing to the development of monitoring use cases and detection improvements.

Applied knowledge of MITRE ATT&CK or equivalent adversary behaviour frameworks.