SOC Technical Lead

- Lead day-to-day SOC operations across all shifts, ensuring consistent 24/7 coverage - Manage shift schedules, handovers, and on-call rotations - Act as the primary escalation point for security incidents and analyst queries - Ensure high-quality triage, investigation, and response aligned to SOC processes - Drive team development through training, coaching, and technical mentoring - Ensure accurate and timely case management (HALO) and delivery against SLAs - Provide expert guidance on threat detection, incident response, and threat hunting - Lead escalations for complex or high-severity incidents across client environments - Develop and optimise detection rules, playbooks, and automation - Improve SOC tooling (SIEM, EDR/XDR, SOAR) and operational processes - Design and maintain advanced detection use cases and correlation logic - Act as a trusted advisor to clients, supporting security reviews and incident analysis - Translate technical findings into clear, actionable recommendations - Support continuous improvement of client security posture - Work closely with Threat Intelligence, Engineering, and Incident Response teams - Enhance detection capability through intelligence sharing and tool optimisation - Identify opportunities to enhance MSSP services and capabilities - Monitor emerging threats, technologies, and industry trends - Ensure compliance with regulatory standards and internal frameworks