SOC Lead/SOC Manager - London - £90,000

Nigel Frank is supporting a global technology organisation in their search for an Onsite SOC Lead/SOC Manager to join a major cybersecurity programme based in London.

This is a highly visible role where you will act as the primary onsite representative for SOC operations, working closely with senior stakeholders while coordinating with offshore security analysts to ensure effective monitoring, threat detection, and incident response.

The successful candidate will play a vital role in strengthening cybersecurity operations, improving detection capabilities, and ensuring operational excellence across the Security Operations Centre.

Key Responsibilities

• Act as the primary onsite point of contact (SPOC) for all cybersecurity operational matters between the client and offshore SOC teams.
• Coordinate communication between stakeholders and the offshore SOC to ensure efficient handling of alerts, incidents, and operational requests.
• Oversee daily SOC operations, ensuring security monitoring, investigations, and response activities are delivered in line with agreed SLAs.
• Lead incident management for high-severity security events, coordinating across IT, infrastructure, and business teams.
• Guide and support SOC analysts across L1, L2, and L3 functions to ensure effective 24/7 security operations.
• Drive improvements across threat detection, incident response processes, and SOC operational maturity.

Skills & Experience

• Extensive experience working in Security Operations Centres (SOC), including leadership or managerial responsibilities.
• Strong technical knowledge of SIEM platforms such as LogRhythm, Splunk, Microsoft Sentinel, or similar.
• Experience working with SOAR, EDR/XDR, and threat detection technologies.
• Strong understanding of incident response frameworks and cybersecurity best practices.
• Experience managing security incidents, investigations, and response coordination.