Lead SOC Analyst - DV Cleared

<p class="text-muted mb-3">YOU MUST HAVE ACTIVE DV CLEARANCE</p>

<p class="text-muted mb-3">Lead SOC Analyst</p>

<p class="text-muted mb-3">£80 per hour - 42 hour weeks</p>

<p class="text-muted mb-3">12 Hour shifts (7am-7pm & 7pm-7am)</p>

<p class="text-muted mb-3">7 Days & 7 Nights over a 4-week pattern</p>

<p class="text-muted mb-3">6 month contract initially</p>

<p class="text-muted mb-3">Buckinghamshire</p>

<p class="text-muted mb-3">Summary - The 3x Lead SOC Analysts will be responsible for the operational leadership of the Security Monitoring function, ensuring the consistent delivery of high-quality security monitoring, investigation and escalation activities.</p>

<p class="text-muted mb-3">Responsibilities</p>

<p class="text-muted mb-3">Lead the shift-based delivery of Security Monitoring services, ensuring timely and effectivemonitoring, investigation, triage and escalation of cyber security events.</p>

<p class="text-muted mb-3">Supervise and coordinate a Senior SOCAnalyst, ensuring investigations meet required professional, technical and documentation standards.</p>

<p class="text-muted mb-3">Act as Duty Lead for Security Monitoring, providing technical leadershipand making operational decisions during live cyber security events.</p>

<p class="text-muted mb-3">Review and quality-assure SOC investigations, confirming findings are accurate, evidence-based and clearly documented.</p>

<p class="text-muted mb-3">Lead complex and high-priority cyber security investigations before escalation to the Incident Response team, as delegated by the Principal SOC Analyst.</p>

<p class="text-muted mb-3">Deliver clear and effective shift handovers, maintaining situational awareness and continuity across ongoing investigations and incidents.</p>

<p class="text-muted mb-3">Coordinate with Incident Responders during cyber security incidents, clearly communicating analytical findings, timelines, indicators of compromise and supporting evidence.</p>

<p class="text-muted mb-3">Collaborate with SOC Engineers to improve monitoring coverage, alert quality and operational effectiveness.</p>

<p class="text-muted mb-3">Support the onboarding of new systems, applicationsand cloud services into SOC monitoringby validating monitoring content and operational readiness.</p>

<p class="text-muted mb-3">Drive continuous improvement across monitoring processes, investigation techniques and analyst efficiency, recommending enhancements to the Principal SOC Analyst.</p>

<p class="text-muted mb-3">Mentor and coach SOC Analysts, supporting their professional development and promoting consistent analytical standards and investigation best practice.</p>

<h5 class="fw-bold text-success mt-4 mb-3">Ensure compliance with SOC operating procedures, security monitoringstandards and information-handling requirements.</h5>

<p class="text-muted mb-3">Identify and escalate operational issues, monitoring gaps and emerging threats to the Principal SOC Analyst and SOC Manager.</p>

<p class="text-muted mb-3">Required Skills / Experience</p>

<p class="text-muted mb-3">Demonstrable experience working within a SOC or comparable cyber security operations environment.</p>

<p class="text-muted mb-3">Experience leading security monitoring activities and supervising analysts during live operational service.</p>

<p class="text-muted mb-3">Strong knowledge of SIEM platforms, log analysis, security monitoring technologies and security event investigation.</p>

<p class="text-muted mb-3">Experience investigating complex cyber security events and determining appropriate escalation paths.</p>

<p class="text-muted mb-3">Good understanding of cyber-attack techniques, indicators of compromise, threat intelligence and defensive monitoring.</p>

<p class="text-muted mb-3">Experience in mentoring or coaching technical staff within an operational environment.</p>

<p class="text-muted mb-3">Excellent analytical, investigative and problem-solving skills.</p>

<p class="text-muted mb-3">Strong written and verbal communication skills, including the ability to communicate clearly under operational pressure.</p>

<p class="text-muted mb-3">Ability to make timely decisions within a fast-paced 24/7 operational environment.</p>

<p class="text-muted mb-3">Profession certifications such as Microsoft SC-200, GIAC GCIH, GCIA, CompTIA CySA+ or equivalent.Desirable:</p>

<p class="text-muted mb-3">Experience using Microsoft Sentinel, LogRhythm, or equivalent enterprise SIEM platforms.</p>

<p class="text-muted mb-3">Experience developing monitoring improvements, detection tuning, or operational process development.</p>

<p class="text-muted mb-3">Experience supporting Incident Responder activities during major cyber security incidents.</p>

<p class="text-muted mb-3">Experience contributing to the development of monitoring use cases and detection improvements.</p>

<p class="text-muted mb-3">Applied knowledge of MITRE ATT&CK or equivalent adversary behaviour frameworks</p>