SOC Manager

Job Description SOC MANAGER Watford, UK Permanent On-siteLead a high-performing SOC. Shape strategy. Drive measurable security outcomes across multi-client environments.ABOUT THE CLIENTOur client is a well-established technology and security services provider, delivering critical cyber capabilities to organisations across multiple sectors, including highly regulated industries such as Government, Defence, and Financial Services.With a strong commitment to CREST standards and ITIL-aligned service delivery, they are investing heavily in growing their Security Operations capability and are looking for an experienced SOC Manager to lead from the front and drive operational maturity across a diverse client portfolio.WHY THIS ROLE?This is not a maintenance role. You will have genuine influence.Own the end-to-end performance of a mature, multi-client SOCDrive real improvements to tooling, playbooks, and threat detection capabilityMentor and develop a team of skilled Analysts and Incident RespondersEngage directly with senior stakeholders and shape security strategyWork within a collaborative leadership team that values your expertiseWHAT YOU'LL DOAs SOC Manager, you will carry full operational responsibility for service delivery, performance, and continuous improvement.Leadership & Team DevelopmentLead, mentor, and develop a team of SOC Analysts and Incident RespondersConduct regular performance reviews and create structured development plansFoster a culture of continuous improvement and operational excellenceIncident ManagementOversee the full incident lifecycle, from detection through containment and resolutionEnsure SLA adherence, clear escalation paths, and consistent client communicationMaintain, test, and continuously improve incident response plans and playbooksThreat Intelligence & Vulnerability OversightDirect threat intelligence collection and analysis to support proactive defence strategiesOversee vulnerability management, ensuring timely identification and remediationLeverage data analysis to detect trends and deliver actionable insights to clientsStandards, Compliance & ReportingEmbed CREST-aligned and ITIL-driven best practice into day-to-day operationsSupport ongoing CREST accreditation and audit readinessProvide regular performance reporting to senior stakeholders across the client baseWHAT WE'RE LOOKING FOREssentialProven experience leading or managing a Security Operations CentreStrong background in security monitoring, incident response, and threat detectionExperience developing and maintaining SOC playbooks and standard operating proceduresSolid working knowledge of the MITRE ATT&CK frameworkHands-on experience with SIEM or XDR platforms, e.g. Microsoft Sentinel, Splunk, or ELKExcellent stakeholder management and communication skillsUnderstanding of ITIL service management principlesExperience working with multiple clients across different industry sectorsDesirableKnowledge of NIST, ISO 27001, or other relevant security frameworksCISM, CISSP, or CREST SOC Manager / Analyst certificationExperience in regulated environments such as Government, Defence, or Financial ServicesTHE BENEFITSCareer progression within a growing, well-funded cyber functionExposure to complex, multi-client security environments across regulated sectorsOngoing professional development and certification supportReal opportunity to influence security strategy, tooling, and process improvementCollaborative and supportive leadership teamTO BE CONSIDEREDPlease apply through this advert or contact Robin Muirhead directly at [email protected] or on 07719 065949.By applying for this role, you give express consent for us to process and submit, subject to required skills, your application to our client in conjunction with this vacancy only.KEY SKILLS SOC Manager, Security Operations Centre, Incident Response, SIEM, Microsoft Sentinel, Splunk, ELK, MITRE ATT and CK, ITIL, CREST, NSD

Created: 2026-03-07