SOC Shift Lead

SOC Shift Lead - Watford, UK

• Up to £75k depending on experience
• On site 4 days on, 4 days off
• Active SC clearance required

Our client operates at the forefront of Cyber Security within highly secure and regulated environments across defence and critical infrastructure. They are continuing to invest in their Security Operations capability and are seeking an experienced SOC Shift Lead to play a key role in driving operational excellence and team development.

• Lead a SOC team supporting critical national infrastructure
• Opportunity to lead and mentor a growing SOC team
• Exposure to complex, high impact environments
• Ongoing training and professional development

As SOC Shift Lead, you will direct a team of SOC Analysts, taking ownership of monitoring, triage and investigation of security events across critical infrastructure. You will provide hands on technical leadership while also developing team capability and improving detection maturity.

You will analyse network traffic, logs and host based events, enhance detection rules aligned to MITRE ATT and threat informed defence, and represent the SOC in partner meetings. This is a hands on leadership role requiring both technical depth and strong people management skills.

• Proven experience within a Security Operations Centre
• Previous line management or team leadership experience
• Strong hands on experience with Microsoft Sentinel and Splunk
• Solid understanding of MITRE ATT and threat informed defence
• Strong networking knowledge including TCP IP, LAN, WAN, SMTP, HTTP, FTP, POP and LDAP
• Experience investigating host and network based security incidents
• Eligibility for DV clearance
• Ability to work on site in Watford on a shift basis

Please either apply through this advert or email me directly via rob For further information please call me on

By applying for this role, you give express consent for us to process and submit, subject to required skills, your application to our client in conjunction with this vacancy only.

SOC Shift Lead, Security Operations Centre, Microsoft Sentinel, Splunk, MITRE ATT, Incident Response, DV Cleared, NSD