SiXworks Limited Logo

SiXworks Limited

SOC Lead

Posted One Month Ago
Be an Early Applicant
In-Office
Farnborough, Rushmoor, Hampshire, England, GBR
Senior level
In-Office
Farnborough, Rushmoor, Hampshire, England, GBR
Senior level
Lead the 24/7 Security Operations Centre, overseeing security monitoring, threat detection, incident response, threat hunting, team management, SOC processes, customer relationships, compliance, KPIs, and continuous improvement. The role requires managing analysts, coordinating critical incidents, optimizing SIEM, SOAR, and EDR capabilities, and reporting operational risks and metrics to leadership.
The summary above was generated by AI

Work on Technology That Protects What Matters

At SiXworks, we build secure digital solutions that support Defence and National Security missions. Our teams work on complex problems where reliability, security, and speed of innovation matter.

 

We’re looking for a SOC Lead who enjoys solving difficult technical challenges and wants their work to have real operational impact.

What You’ll Do

As a SOC Lead, you’ll lead the everyday operation, development, and continuous improvement of the 24/7 Consolidated Security Operations Centre (SOC). You will be responsible for overseeing all Consolidated SOC functions, managing a team, and ensuring the delivery of high-quality SOC services including 1st-3rd line Security monitoring and alert analysis, threat detection, incident management and response, and where required threat hunting services.

 

Your work may include:

  • Run the day to day operations of the 24/7 Consolidated SOC in line with customer requirements and SiXworks Security practices. ConsolidatedDefine and execute the SOC strategy aligned with organisational security goals.
  • Recruit, Train, and manage Consolidated SOC Analysts including developing shift schedules, forecasting and approving work hours.
  • Provide mentoring, performance feedback, and development opportunities of the Consolidated SOC Analysts
  • Oversee the design, implementation, and optimisation of Consolidated SOC processes, tools, and technologies in conjunction with the external customers and the SiXworks SOC manager.
  • Define, develop and improve the Consolidated SOC Operating Procedures KPIs, SLAs to meet customers requirements provide and appropriate reporting for executive leadership.
  • Collaborate with threat intelligence, risk management, and compliance teams.
  • Ensure 24/7 operational readiness and effective incident response capabilities for the Consolidated SOC
  • Manage the technical and security aspects of the Consolidated SOC directly with customers on consolidated SOC-related contracts.
  • Drive innovation and continuous improvement in Consolidated SOC operations and threat detection capabilities.
  • Lead Consolidated SOC incident response efforts and post-incident reviews in conjunction with the SOC Manager.
  • Coordinate with all teams during critical incidents.
  • Ensure compliance of the Consolidated SOC with relevant standards (e.g., ISO 27001, SOC 2, NIST, GDPR).
  • Provide regular reporting to leadership on Consolidated SOC metrics, trends, and risks.

What We’re Looking For

We value people who take ownership, think critically, and enjoy working as part of a collaborative team tackling complex challenges. You don’t need to tick every box, but we’re particularly interested in people with skills/experience in:

  • Bachelor’s in Science, or related field.
  • Excellent communication, leadership, and stakeholder management skills.
  • 8+ years of experience in cybersecurity, with at least 3 years in a SOC leadership role.
  • Strong knowledge of SIEM, SOAR and EDR
  • Familiarity with threat intelligence frameworks (e.g MITRE ATT&CK, STIX/TAXII).
  • Proven incident response and crisis management experience.
  • Proven experience in managing SOC teams.
  • Relevant certifications (e.g., CISSP, CISM, GIAC, CSPA,) preferred.

Just as important are curiosity, strong problem solving ability, and the motivation to continuously improve how technology is designed and delivered.

About SiXworks

SiXworks is a specialist digital innovation partner delivering secure, mission-critical technology to Defence and National Security organisations. We focus on digital experimentation, secure-by-design architecture, cloud technologies, and rapid application development to help our customers move faster and stay ahead of evolving challenges.

 

Our team combines expertise from across technology, business, and operational backgrounds including the armed forces creating a collaborative environment where practical thinking and innovation thrive.

Why Join Us

Our culture is guided by six principles: Agility, Security, Innovation, Quality, Collaboration and Inclusivity our North Star for how we work. SiXworks is a leading provider of secure digital solutions, specialising in digital experimentation and focused on fail-safe-fast cutting-edge technology solutions deployed in highly secure environments.

 

As an end-to-end digital innovation and delivery partner, we turn complex challenges into mission-critical digital advantages. This is a thrilling time for us, with ambitious plans for growth. We are looking for brilliant, experienced, driven and self-motivated people to join the team on our journey.

 

We offer competitive salaries and a package that supports your wellbeing and development, including 25 days annual leave + bank holidays, free Private Medical cover and Life Assurance, Generous pension (10% employer, 5% employee contribution), Bonus and Professional development and training support. In addition to secure parking, gym, café & restaurant on site and lots of open break out spaces.

A word on UK Security Clearance 

Due to the secure nature of the position and working environment, you must have or be eligible to obtain a high level of Security Clearance. More details relating to UK Security Clearance can be found here:  

United Kingdom Security Vetting: clearance levels - GOV.UK (www.gov.uk) 

 

Interested? 

Please apply!

Similar Jobs

8 Days Ago
Hybrid
London, England, GBR
Entry level
Entry level
eCommerce • Retail
Leads the SOC and Incident Response team, directing security monitoring, detection engineering, incident investigations, threat-led analysis, and post-incident improvement. Oversees analysts and the external MSSP, develops response processes, tunes detections, manages incident metrics, conducts training and simulations, and communicates cyber risks and performance to senior stakeholders. Requires hands-on expertise across SIEM, EDR, cloud, identity, email security, and forensic tooling.
Top Skills: AWSAzureCloud SecurityCyber EssentialsEdrEmail SecurityForensic AnalysisGdprIdentity SecurityIso 27001NistPci-DssSIEMThreat Intelligence
2 Months Ago
Remote or Hybrid
GBR
Junior
Junior
Information Technology • Professional Services • Software • Cybersecurity
Monitor, detect, investigate, and respond to security events using Splunk Enterprise Security. Triage incidents, perform log analysis and event correlation, assist threat hunting and vulnerability remediation, escalate significant incidents, and maintain incident documentation and SOC playbooks.
Top Skills: Endpoint SecurityNetwork SecuritySecurity Monitoring ToolsSIEMSplunkSplunk Enterprise Security
Yesterday
Easy Apply
Hybrid
London, Greater London, England, GBR
Easy Apply
Expert/Leader
Expert/Leader
Fintech • Information Technology • Payments • Productivity • Software • Travel • Automation
Leads EMEA field marketing strategy, demand generation, regional campaigns, events, account-based initiatives, team development, budget management, and marketing analytics. Partners with Sales, Customer Success, RevOps, Partnerships, and Global Marketing to generate pipeline, accelerate revenue, localize global programs, optimize lead conversion, and strengthen the company’s regional presence.

What you need to know about the London Tech Scene

London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account