Quick overview
Job description
SOC Manager / SOC Team Lead
Salary: £55,000-£65,000 DOE
Location: London
An exciting opportunity to build, lead and develop a new in-house Security Operations Centre (SOC) within a global enterprise organisation.
We're supporting a global organisation as they make a significant investment in their cybersecurity capabilities, transitioning from an outsourced SOC model to a fully integrated, internally managed security operation.
As part of this journey, we're looking for an experienced SOC Manager / SOC Team Lead to take ownership of the day-to-day operation, develop a team of security analysts and help shape the future of the organisation's security monitoring and incident response capabilities.
This is a fantastic opportunity for someone who enjoys combining hands-on technical expertise with people leadership and wants to have a genuine impact on how a SOC is built and operated.
The Role
You'll play a key role in establishing and developing a high-performing SOC function, with responsibilities including:
- Leading, mentoring and developing a team of Tier 1 SOC Analysts operating across a 24/7 environment.
- Supporting the transition from an outsourced SOC provider to an internal security operation.
- Overseeing security monitoring, incident investigation, escalation and response activities.
- Managing and improving SIEM, EDR/XDR and enterprise security monitoring capabilities.
- Developing SOC processes, incident response playbooks, shift handovers and escalation procedures.
- Improving detection capabilities, reducing false positives and introducing automation where appropriate.
- Establishing operational KPIs, SLAs and reporting processes.
- Working closely with senior cybersecurity leadership and IT teams across the business.
What We're Looking For
- 5+ years' experience within cybersecurity operations, SOC environments or incident response.
- At least 2 years' experience leading security analysts or managing SOC operations.
- Strong technical knowledge of SIEM, EDR/XDR and security monitoring technologies.
- Experience managing security incidents, investigations and escalations.
- Good understanding of Microsoft 365 security, endpoint protection, identity and network security.
- Experience developing SOC processes, procedures and operational improvements.
- Familiarity with MITRE ATT&CK, threat intelligence and detection engineering.
- Strong communication skills and a hands-on, collaborative leadership style.
Additional experience that would be beneficial:
- Microsoft Sentinel, Defender XDR and KQL.
- Building an internal SOC or transitioning away from an outsourced SOC/MSSP.
- SOAR and security automation.
- Certifications such as CISSP, CISM, GCIH, GCIA or SC-200.
Why Consider This Opportunity?
- Build something from the ground up - play a central role in developing a new internal SOC.
- Real ownership and influence - shape the people, processes and operational capabilities.
- Global exposure - work across a diverse, international enterprise environment.
- Leadership opportunity - develop your own team and work closely with senior cybersecurity stakeholders.
- Long-term development - contribute to the ongoing maturity of the organisation's cybersecurity function.
If you're an experienced SOC Team Lead or SOC Manager looking for an opportunity where you can make a real difference, we'd love to hear from you.
Apply today or get in touch for a confidential conversation.
Similar jobs
- DR
Senior Information Security AnalystRecently posted
DGH Recruitment · Ocean Village, Southampton · Hybrid · Posted 11 Nov 2026 🇬🇧
TechnologySalary not listed - TT
Head of Security Engineering – Application Security & Security TestingRecently posted
Tesco Technology · welwyn garden city · Hybrid · Posted 11 Nov 2026 🇬🇧
Stakeholder ManagementGenerative AIAdministrativeSalary not listed - GS
Security Engineer at GlasswallRecently posted
Glasswall Solutions Limited · london · Hybrid · Posted 11 Nov 2026 🇬🇧
AWSOWASPBash+10TechnologySalary not listed - TD
IT security engineer in financial marketsRecently posted
The Depository Trust & Clearing Corporation (DTCC) · london · Hybrid · Posted 11 Nov 2026 🇬🇧
Stakeholder ManagementActive DirectoryPKI+3TechnologySalary not listed - ZO

Senior Security EngineerRecently posted
Zoom · United Kingdom · Remote · Posted 11 Nov 2026 🇬🇧
PHPAWSEncryption+6TechnologySalary not listed - 83

OT Security ConsultantRecently posted
83zero Ltd · manchester · On-site · Posted 11 Nov 2026 🇬🇧
TechnologySalary not listed - SA

Product Security Engineer: AI/GenAI Threat Modeling & CloudRecently posted
Salesforce, Inc. · ashington · Hybrid · Posted 11 Nov 2026 🇬🇧
DockerKubernetesTechnologySalary not listed - XA
Kubernetes Security Engineer — Build Scalable DefensesRecently posted
xAI · ashington · Hybrid · Posted 11 Nov 2026 🇬🇧
KubernetesTechnologySalary not listed - OP

Director of AI Agent Security Platform EngineeringRecently posted
Ocho People Ltd. · belfast city district, northern ireland · Hybrid · Posted 11 Nov 2026 🇬🇧
AdministrativeSalary not listed - OR

Product Security EngineerRecently posted Auto Apply
Orbital · London · Hybrid · Posted 11 Nov 2026 🇬🇧
AWSEncryptionOWASP+10TechnologySalary not listed - S&
Senior SOC AnalystRecently posted
Stott & May Professional Search Limited (TJ) · City, London · On-site · Posted 11 Nov 2026 🇬🇧
TechnologySalary not listed - IN

Information Security AdvisorRecently posted
InvitISE · Salisbury, Wiltshire · Hybrid · Posted 11 Nov 2026 🇬🇧
AdministrativeSalary not listed