Security Operations Centre Manager

In this SOC Manager role, you lead a London-based team of analysts responsible for monitoring, investigating, and responding to security alerts across high-performance compute and hybrid cloud environments. You own day-to-day delivery, drive triage excellence, and partner with senior CSIRT to improve detection and response. You’ll shape workflows, tooling, and incident handling while growing a capable, resilient security operations function. This is a chance to influence security across a fast-paced, research-driven organization.

• highly competitive compensation including annual discretionary bonus
• lunch provided and barista bar
• 35 days of annual leave
• 9% pension contributions
• comprehensive healthcare and life assurance
• cycle-to-work scheme

• Lead and develop a team of security analysts
• Own triage, investigation and incident response delivery
• Set standards for case quality, documentation and processes
• Manage rosters and handovers for consistent coverage
• Coach analysts in alert triage, forensics and threat hunting
• Drive continuous improvement of workflows, tooling and processes
• Report on team performance and metrics
• Shape detection rules, analytics and playbooks with senior CSIRT analysts

• Substantial experience in security operations or incident response with hands-on alert handling
• Experience leading or mentoring analysts; formal line-management experience
• Strong knowledge of network security, endpoint artefacts and common attack paths
• Experience coordinating incident response and operating under pressure
• Track record of improving operational quality and consistency
• Practical experience with SIEM, XDR or SOAR tools
• Clear communication with technical teams and senior stakeholders
• Scripting or automation experience (Python, PowerShell, Bash) and exposure to cloud or HPC environments (desirable)

• Strong communication
• Leadership and mentoring
• Decision-making under pressure
• SIEM
• XDR
• SOAR