Senior SOC Manager – Managed Cyber Defence
Job Description
Line of Service
Assurance
Industry/Sector
Not Applicable
Specialism
Risk
Management Level
Senior Manager
Job Description & Summary About the role:
We are seeking a Senior Manager to lead the day-to-day technical delivery of our Managed Cyber Defence services. This role has direct responsibility for Analysis and Engineering teams, ensuring the effective running, stability, and continuous improvement of a 24/7 client facing cyber defence capability.
The role will focus on the operational delivery of services across a range of security platforms, including Microsoft Defender/Sentinel, Palo Alto Networks Cortex XDR/XSIAM, Google SecOps & CrowdStrike Falcon.
You will play a key role in ensuring services are efficient, resilient, and continuously improving – working closely with internal teams to evolve detection, response, and automation capabilities.
What your days will look like
- Lead day to day operations across Analysis and Engineering teams delivering Managed Cyber Defence services.
- Ensure service stability, performance, and quality across client environments, acting as a senior escalation point for incidents and technical issues.
- Manage prioritisation and workload across teams, including leadership of complex client incidents and investigations.
- Own and optimise the security technology stack (primarily Microsoft Sentinel and Defender), driving effective use of AI and automation in the SOC.
- Identify opportunities to improve efficiency through automation and work closely with automation teams to evolve capabilities.
- Oversee operational reporting and support ongoing client interactions related to service delivery and performance.
- Provide technical leadership, maintain awareness of relevant security technologies, and drive continuous improvements in detection, response, and key SOC metrics (MTTD, MTTR, automation coverage).
The role is for you if:
- You have experience of embedding AI tooling within a SOC environment
- Experience with Microsoft Sentinel and Defender and strong knowledge of KQL.
- Experience in SOC, XDR, or managed security environments.
- Familiarity with Palo Alto, CrowdStrike, or Google tools is beneficial.
- Security operations, incident response, detection engineering.
- Cloud (Azure preferred), automation concepts.
- Experience leading technical teams in live service environments.
- Desirable: SC-200 and/or GIAC certifications.
What you’ll receive from us:
No matter where you may be in your career or personal life, our benefits are designed to add value and support, recognising and rewarding you fairly for your contributions.
- We offer a range of benefits including empowered flexibility and a working week split between office, home and client site; private medical cover and 24/7 access to a qualified virtual GP; six volunteering days a year and much more.
Education (if blank, degree and/or field of study not specified)
Degrees/Field of Study required:
Degrees/Field of Study preferred:
Certifications (if blank, certifications not specified) Required Skills Optional Skills
- Accepting Feedback
- Accepting Feedback
- Active Listening
- Analytical Thinking
- Cloud Security
- Coaching and Feedback
- Communication
- Conducting Research
- Creativity
- Cyber Defense
- Cyber Threat Intelligence
- Embracing Change
- Emotional Regulation
- Empathy
- Encryption
- Inclusion
- Influence
- Information Security
- Intellectual Curiosity
- Intelligence Analysis
- Intelligence Report
- Intrusion Detection
- Intrusion Detection System (IDS)
- IT Operations
- Learning Agility + 24 more
Desired Languages (If blank, desired languages not specified) Travel Requirements
Up to 20%
Available for Work Visa Sponsorship?
No
Government Clearance Required?
Yes
Job Posting End Date
