Job Description
YOU MUST HAVE ACTIVE DV CLEARANCELead SOC Analyst£80 per hour - 42 hour weeks12 Hour shifts (7am-7pm & 7pm-7am)7 Days & 7 Nights over a 4-week pattern6 month contract initiallyBuckinghamshireSummary - The 3x Lead SOC Analysts will be responsible for the operational leadership of the Security Monitoring function, ensuring the consistent delivery of high-quality security monitoring, investigation and escalation activities.
ResponsibilitiesLead theshift-based delivery of Security Monitoring services, ensuring timely and effectivemonitoring, investigation, triage and escalation of cybersecurity events.
Supervise and coordinate a Senior SOCAnalyst, ensuring investigationsmeet required professional, technicaland documentation standards.
Act as Duty Lead for Security Monitoring, providing technical leadershipand makingoperational decisions during live cybersecurity events.
Review and quality-assureSOC investigations, confirming findings are accurate, evidence-based and clearly documented.
Lead complex and high-priority cyber securityinvestigations before escalation to the IncidentResponse team, as delegated by the Principal SOC Analyst.
Deliver clear and effectiveshift handovers, maintaining situational awareness and continuity across ongoing investigations and incidents.
Coordinate with Incident Responders during cyber security incidents,clearly communicating analytical findings, timelines, indicators of compromise and supporting evidence.
Collaborate with SOC Engineers to improve monitoringcoverage, alert quality and operational effectiveness.
Support the onboarding of new systems, applicationsand cloud services into SOC monitoringby validating monitoring content and operational readiness.
Drive continuous improvement across monitoring processes, investigation techniques and analyst efficiency, recommending enhancements to the Principal SOC Analyst.
Mentor and coach SOC Analysts, supporting their professional developmentand promoting consistent analytical standards andinvestigation best practice.
Ensure compliance with SOCoperating procedures, security monitoringstandards and information-handling requirements.
Identify and escalate operational issues, monitoring gaps and emerging threats to the Principal SOC Analyst and SOC Manager.
Required
Skills / ExperienceDemonstrable experience working within a SOC or comparable cyber security operations environment. Experience leading security monitoring activities and supervising analysts during live operational service.
Strong knowledge of SIEM platforms, log analysis, security monitoring technologies and security event investigation.
Experience investigating complex cyber security events and determining appropriate escalation paths.
Good understanding of cyber-attack techniques, indicators of compromise, threat intelligence and defensive monitoring.
Experience in mentoring or coaching technical staff within an operational environment. Excellent analytical, investigative and problem-solving skills. Strong written and verbal communication skills, including the ability to communicate clearly under operational pressure.
Ability to make timely decisions within a fast-paced 24/7 operational environment. Profession certifications such as Microsoft SC-200, GIAC GCIH, GCIA, CompTIA CySA+ or equivalent.
Desirable:
Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms.
Experience developing monitoring improvements, detection tuning, or operational process development.
Experience supporting Incident Responder activities during major cyber security incidents.
Experience contributing to the development of monitoring use cases and detection improvements.
Applied knowledge of MITRE ATT&CK or equivalent adversary behaviour frameworks.
Lead SOC Analyst - DV Cleared in High Wycombe employer: Network IT
Network IT is an exceptional employer, offering a dynamic work environment in Milton Keynes where you can lead a skilled team in delivering cutting-edge security solutions for high-stakes government projects. With a strong emphasis on employee growth and development, we provide opportunities for professional advancement while fostering a collaborative culture that values innovation and teamwork. Join us to make a meaningful impact in secure environments, with the added benefit of potential international travel.
