SOC Shift Lead

About the role

Join Sopra Steria’s Security Operations Centre as a SOC Shift Lead. You will lead a high‑performing team of analysts while staying hands‑on in the detection, investigation and response to sophisticated cyber threats across critical UK organisations.

Key responsibilities

• Lead, motivate and develop a team of SOC Analysts in a 24/7 environment.
• Own major security incidents and act as the primary escalation point for high‑priority threats.
• Hunt, investigate and respond to advanced attacks using network traffic, endpoint activity, logs and alerts.
• Drive continuous improvement of detection capabilities aligned with the MITRE ATT&CK framework.
• Enhance SOC processes, tooling, playbooks and overall operational effectiveness.
• Represent the SOC in discussions with stakeholders, partners and customers.

Required profile

• Proven experience working in a Security Operations Centre.
• Strong incident detection, investigation and response background.
• Deep understanding of network‑ and host‑based attack techniques.
• Hands‑on experience with SIEM platforms such as Microsoft Sentinel or Splunk.
• Demonstrated ability to lead, coach or mentor analysts in an operational security setting.

Required skills

• SIEM tools – Microsoft Sentinel, Splunk.
• MITRE ATT&CK framework knowledge.
• Scripting – Python, PowerShell, Bash.
• Detection engineering and threat‑informed defence.
• Malware analysis or reverse‑engineering exposure.

What we offer

• Competitive salary range £50,000‑£65,000 per year.
• Eligibility for SC and DV security clearance.
• Shift pattern: 2 × 06:00‑18:00, 2 × 18:00‑06:00 with four days off.
• Office‑based work in Farnborough (or Hemel Hempstead) with career development opportunities.