SOC LEAD

Select how often (in days) to receive an alert:

Doyouwanttoleadinadynamicbusinessthat’stransformingglobalautomotivedistribution?

AtInchcape,we’repursuinganexcitingstrategytoevolveourglobalbusinessandaccelerateourindustrytowardsalow-carbon,sustainable future.

Join
Inchcape Digital,partof

Inchcapeglobalnetwork.

You’llexploreanddevelopcutting-edgetechnologyanddatasolutionsthataredrivingourinnovationanduniquemarketposition.

Thriveaspartofahighlycollaborativeandsupportiveteamofdiverseandtalentedcolleagues.

Our Security platform is seeking a SOC Lead to join our team. The SOC Lead is a hands-on cybersecurity leader responsible for driving the performance of Inchcape’s Global SOC. This role combines technical leadership, incident response expertise and people management, leading analysts through complex investigations, developing team capabilities, and ensuring the delivery of a world-class security operations service.

• Lead SOC shifts and provide day-to-day operational direction to L1 and L2 SOC Analysts, ensuring alerts, incidents, investigations, handovers and escalations are managed effectively and in line with established SOC procedures.
• Act as the primary technical escalation point for complex security alerts and incidents, applying advanced investigative skills across SIEM, EDR, email security, identity, cloud, endpoint and security monitoring technologies.
• Leverage strong IT infrastructure knowledge, including operating systems, networking, Active Directory, cloud services, endpoint technologies and enterprise environments, to support investigations, identify root causes and drive effective incident resolution.
• Review and quality-assure analyst investigations, case notes, evidence collection, timelines and incident records, ensuring accuracy, consistency, excellent attention to detail and appropriate escalation of security incidents.
• Manage incident and operational escalations, prioritising activity based on risk, threat severity and business impact, while providing timely updates to the Head of SOC and relevant stakeholders
• Act as an escalation point for analysts participating in the on-call rota, providing technical leadership, guidance and decision-making.
• Coach, mentor and develop SOC Analysts, conducting regular one-to-one meetings, providing constructive feedback, supporting career development and fostering a culture of continuous learning and operational excellence.
• Work closely with the Head of SOC to deliver operational objectives and continuous improvement initiatives, enhancing SOC processes, playbooks, runbooks, detection capabilities, reporting, knowledge management and overall service effectiveness.

• Strong SOC operations experience, including hands-on investigation of complex security alerts and incidents in a Level 2 or Level 3 analyst capacity
• Deep technical knowledge of SIEM, EDR, SOAR, email security, identity, cloud, endpoint and ticketing platforms, supported by broad experience across enterprise IT environments, including Windows and Linux operating systems, Active Directory, networking, authentication and cloud technologies.
• Ability to lead shifts, prioritise work, manage escalations and make sound operational decisions under pressure.
• Strong understanding of common attack techniques, incident response processes, threat intelligence, malware analysis concepts, phishing investigations and account compromise workflows.
• Ability to work with the Head of SOC to define quarterly goals, translate priorities into practical objectives, and support delivery through regular review and follow-up.
• Commitment to continuous improvement, operational discipline, excellent attention to detail, knowledge sharing, and maintaining a high-performing, resilient SOC service.

AtI…