Soc Shift Lead

Are you ready to take your SOC expertise to the next level? We are seeking a dynamic and highly capable SOC Shift Lead to support and secure critical infrastructure within the exciting Aerospace, Defence, and Security sector.

This is an exceptional opportunity to lead a team of talented analysts, manage incident triage, and drive operational excellence in a mission-critical environment.

It would be highly desirable if you have SC clearance and also be eligible and be prepared to be put through the process for DV Clearance

This role offers a unique shift-based schedule: 2 days (6am-6pm), 2 nights (6pm-6am), followed by 4 days off—providing an excellent work-life balance.

To be considered for this role you will need to have

• Proven experience in a Security Operations Centre (SOC) environment (SOC Level 2)
• Previous people management or line management experience
• Strong familiarity with SIEM platforms including Microsoft Sentinel and Splunk
• Knowledge and use of the Mitre Att&ck Framework for detection and threat analysis
• In-depth understanding of:
• Client-server applications and multi-tier web environments
• Relational databases, firewalls, VPNs, enterprise AntiVirus solutions
• Networking principles (e.g. TCP/IP, WAN, LAN, SMTP, HTTP, FTP, POP, LDAP)

It would also be desirable if you were to have

• Experience in static malware analysis and reverse engineering
• Any scripting or programming with Python, Perl, Bash, PowerShell, or C++
• Recognised certifications such as CREST Practitioner Intrusion Analyst or Blue Team Level 1
• Familiarity with additional SIEM technologies, especially QRadar

The successful SOC Shift Lead, you will ensure the seamless operation and continual enhancement of SOC processes and personnel. This pivotal role involves safeguarding client systems while guiding your team through sophisticated cyber defence challenges.

The Soc Shift Lead will be tasked with

• Monitoring, triaging, and investigating alerts across host and network security systems
• Performing deep analysis of traffic, logs, and system events to identify threats and vulnerabilities
• Providing line management to SOC Analysts—developing their skills and supporting career progression
• Enhancing team knowledge across SOC tooling, detection methodologies, and threat triage
• Analysing and optimising detection rules and use cases based on Mitre Att&ck
• Maintaining detailed and up-to-date incident documentation, findings, and mitigation strategies
• Acting as a representative of the SOC in key meetings and internal stakeholder engagements
• Working shifts from the on-site SOC in Hemel Hempstead

You will be joining an organisation that is at the forefront of delivering cutting-edge digital solutions to Central Government clients and you would be contributing meaningfully to the UK’s most complex safety- and security-critical environments.