Lead SOC Analyst - DV Cleared

Salary: £? - ? per year

Requirements:

• We require active DV clearance.
• Demonstrable experience working within a SOC or comparable cyber security operations environment.
• Experience leading security monitoring activities and supervising analysts during live operational service.
• Strong knowledge of SIEM platforms, log analysis, security monitoring technologies, and security event investigation.
• Experience investigating complex cyber security events and determining appropriate escalation paths.
• Good understanding of cyber-attack techniques, indicators of compromise, threat intelligence, and defensive monitoring.
• Experience mentoring or coaching technical staff in an operational environment.
• Excellent analytical, investigative, and problem-solving skills.
• Strong written and verbal communication skills, including the ability to communicate clearly under operational pressure.
• Ability to make timely decisions in a fast-paced 24/7 operational environment.
• Professional certifications such as Microsoft SC-200, GIAC GCIH, GCIA, CompTIA CySA+, or equivalent.
• Desirable: Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms.
• Desirable: Experience developing monitoring improvements, detection tuning, or operational processes.
• Desirable: Experience supporting Incident Responder activities during major cyber security incidents.
• Desirable: Experience contributing to monitoring use cases and detection improvements.
• Desirable: Applied knowledge of MITRE ATT&CK or equivalent adversary behaviour frameworks.

Responsibilities:

• Lead shift-based delivery of Security Monitoring services, ensuring timely and effective monitoring, investigation, triage, and escalation of cyber security events.
• Supervise and coordinate a Senior SOC Analyst, ensuring investigations meet professional, technical, and documentation standards.
• Act as Duty Lead for Security Monitoring, providing technical leadership and making operational decisions during live cyber security events.
• Review and quality-assure SOC investigations, confirming findings are accurate, evidence-based, and clearly documented.
• Lead complex and high-priority cyber security investigations before escalation to the Incident Response team, as delegated by the Principal SOC Analyst.
• Deliver clear and effective shift handovers, maintaining situational awareness and continuity across ongoing investigations and incidents.
• Coordinate with Incident Responders during cyber security incidents, communicating analytical findings, timelines, indicators of compromise, and supporting evidence.
• Collaborate with SOC Engineers to improve monitoring coverage, alert quality, and operational effectiveness.
• Support the onboarding of new systems, applications, and cloud services into SOC monitoring by validating monitoring content and operational readiness.
• Drive continuous improvement across monitoring processes, investigation techniques, and analyst efficiency, recommending enhancements to the Principal SOC Analyst.
• Mentor and coach SOC Analysts, supporting their professional development and promoting consistent analytical standards and investigation best practice.
• Ensure compliance with SOC operating procedures, security monitoring standards, and information-handling requirements.
• Identify and escalate operational issues, monitoring gaps, and emerging threats to the Principal SOC Analyst and SOC Manager.

Technologies:

• Cloud
• Support
• Security

More:

We are seeking three Lead SOC Analysts to provide operational leadership for our Security Monitoring function and ensure consistent, high-quality monitoring, investigation, and escalation. This is an initial six-month contract based in Buckinghamshire, paying £80 per hour for 42-hour weeks. The role follows 12-hour shifts, 7am–7pm and 7pm–7am, with seven days and seven nights across a four-week pattern.

last updated 39 week of 2026