Lead CyberSecurity SOC Analyst

The Lead CyberSecurity SOC Analyst in Nottingham manages real-time security incident response, overseeing shift operations, and guiding junior analysts. They handle escalated investigations, ensure incident response procedures are consistently followed, and contribute to process improvements. Skills required include expertise with SIEM, EDR, and NDR platforms, a strong understanding of attacker TTPs, and experience with cloud environments such as AWS or Azure. The role involves mentoring team members, supporting onboarding, and enhancing operational workflows, alongside tracking key performance indicators for cybersecurity metrics. Effective communication and high-pressure decision-making skills are essential, along with participation in a 24/7 on-call rotation. The position demands a minimum of five years' cybersecurity experience, with at least two years in a leadership capacity, and relevant certifications are preferred. Candidates should demonstrate flexibility, proactive ownership, and continuous improvement in security operations.