SOC Manager (Microsoft Partner MSSP)

This role is with one of the UK’s most exciting Microsoft Security partners, recognised for building modern, outcome led security services. This hire is a key part of the evolution of their security practice. You will take ownership of their Security Operations Centre, leading the SOC function and setting the direction for how incidents are detected, managed, and resolved across a 24x7 environment.

Why This Role Stands Out

This is not a steady state SOC Manager role. You are being hired to evolve and scale the SOC capability, shaping how it operates today and how it grows in the future. You will have genuine influence over people, processes, tooling, and how the SOC works alongside threat intelligence, vulnerability management, and engineering teams. This is a role for someone who wants ownership, visibility, and impact rather than simply overseeing shifts and reporting.

Key Responsibilities

• Lead and manage the SOC team, ensuring effective monitoring, detection, and response to security incidents
• Own the end to end incident response lifecycle and act as incident manager for high priority incidents
• Provide clear and regular reporting to senior stakeholders on SOC performance and risk posture
• Coordinate internal teams and external stakeholders during major security incidents
• Drive post incident reviews and embed continuous improvement across the SOC
• Define, review, and enhance SOC processes aligned with industry best practice
• Act as the escalation point for L1, L2, and L3 analysts during investigations
• Mentor and develop analysts, building a high performing and commercially aware SOC team
• Stay current on emerging threats, vulnerabilities, and attacker techniques
• Deliver BAU operations against agreed KPIs and SLAs while supporting wider security initiatives

Ideal Experience

• Strong cybersecurity background with proven SOC or security operations leadership experience
• Good rounded knowledge of Microsoft security services, including Microsoft Defender, Microsoft Sentinel, and modern SOC capabilities built on the Microsoft security stack
• An understanding of how Copilot for Security fits into modern incident response and analyst workflows
• Comfortable leading during high pressure incident scenarios and making clear decisions
• Experience mentoring and developing security analysts
• Excellent communication skills with the ability to brief both technical teams and senior stakeholders
• Relevant certifications such as CISSP, CISM, or CEH are highly desirable

If you want to lead a Microsoft aligned SOC and actually shape how it works, rather than inherit someone else’s playbook, this role has real substance.