SOC Shift Lead - Internet Service Provider

Ready to take the next step in your career?

Join a leading managed service provider specializing in modernizing and securing critical enterprise infrastructure. The organization simplifies technical service management across cloud, network, and cybersecurity platforms, enabling global clients to streamline operations.

The company is inviting applications from experienced professionals for the role of SOC Shift Lead. The successful candidate will oversee daily security operations center shift activities, acting as the key escalation point for complex technical incidents while ensuring SLA compliance. Key responsibilities include conducting quality assurance reviews, providing technical mentorship to analysts, and maintaining clear stakeholder communication. Additionally, the ideal candidate will support threat-hunting activities and process refinements to continuously improve service delivery.

Don't miss out on this exciting opportunity and apply today!

Responsibilities:

• Run shift operations, ensuring compliance with SLAs and maintaining high-quality incident handling. Set shift agendas, balance workloads, and promptly address any process or staffing issues. Maintain effective, customer-centric communication with internal teams (including Security Optimization and Engineering), customers, and incident response partners.
• Review and prioritize new alerts, taking initial ownership of high-priority or complex incidents, and ensuring proper escalation to customers and Senior SOC Analysts. Make sound, data-driven decisions to facilitate effective triage, investigation, and escalation in line with operational standards.
• Conduct regular quality assurance (QA) of tickets to ensure SOC procedures and documentation standards are met, providing clear, constructive feedback to team members to improve technical skills and workflow consistency.
• Mentor SOC Analysts by offering regular, constructive feedback on triage processes and best practices. Encourage targeted training initiatives, including relevant certifications, to support career progression within the SOC.
• Contribute to ongoing service improvements through participation in threat-hunting activities led by Senior SOC Analysts, rule tuning, and process refinement initiatives. Assist with monthly reporting and post-incident reviews to drive continuous performance enhancements.

Skills/Must Have:

• A minimum of 3+ years of SOC operational experience, demonstrating a strong background in alert triage, incident analysis, and escalation
• ITSM/ticketing platforms (such as ServiceNow) and processes (ticket prioritisation, SLAs etc)
• Microsoft - including Sentinel and Defender XDR
• SentinelOne - including both endpoint and AI SIEM
• Triaging and investigating incidents as a SOC Analyst
• Shift Lead management, including chairing shift meetings, monitoring SLAs, quality assuring tickets and mentoring/coaching other analysts
• Escalation decision making
• Customer focused and able to communicate (both written and verbal)

Salary:

• £38,500 plus 20% shift allowance