About the job
SOC Lead – Leeds hybrid - £45,000 - £65,000 + Excellent benefits
As a SOC Lead you will be a key member of our clients SOC team responsible for leading and coordinating efforts related to security operations and incident response. You will leverage your deep knowledge of the Microsoft Suite to enhance our clients security posture, proactively identify and respond to threats, and ensure the integrity of our clients overall security structure.
Main responsibilities:
- Lead and mentor a team of SOC analysts, providing guidance, training, and support in daily operations and incident response activities.
- Demonstrate a strong understanding of Microsoft technologies, including but not limited to Windows Server, Active Directory, Azure, Office 365, and associated security controls.
- Oversee the monitoring of security alerts and events to identify and investigate potential security incidents.
- Lead incident response efforts, coordinate with relevant stakeholders, and ensure timely resolution of security incidents.
- Stay updated on the latest cybersecurity threats, vulnerabilities, and trends, particularly those related to Microsoft technologies.
- Analyze threat intelligence data to enhance the SOC's detection capabilities and response strategies.
- Manage and optimize security tools and technologies related to the Microsoft Suite, ensuring their effectiveness in threat detection and prevention.
- Prepare and deliver reports on security incidents, trends, and SOC performance to senior management and clients.
To be considered for this role, you should have:
- Proven experience in a SOC environment, with experience in a leadership or supervisory role.
- Strong expertise in Microsoft technologies, including Windows, Active Directory, Azure, and Office 365.
- Experience working with any of the following: CheckPoint, PaloAlto, Juniper.
- Familiarity with security tools such as SIEMs, IDS/IPS, and endpoint security solutions.
- Excellent problem-solving and communication skills.
- Ability to work in a fast-paced and dynamic cybersecurity environment.