SOC Lead – Cybersecurity Operations

About the role

Inchcape Digital is looking for a hands‑on SOC Lead to drive the performance of its Global Security Operations Centre. You will lead a team of L1 and L2 analysts, manage complex security incidents and help shape the future of the SOC through continuous improvement.

Key responsibilities

• Lead SOC shifts, providing day‑to‑day direction to analysts and ensuring alerts, investigations and escalations follow established procedures.
• Act as the primary technical escalation point for complex alerts across SIEM, EDR, email security, identity, cloud and endpoint technologies.
• Leverage deep knowledge of operating systems, networking, Active Directory and cloud services to support investigations and drive root‑cause resolution.
• Review and quality‑assure analyst case notes, evidence collection and incident records for accuracy and consistency.
• Prioritise incident escalations based on risk, threat severity and business impact, keeping stakeholders informed.
• Coach, mentor and develop SOC analysts through regular one‑to‑ones, feedback and career‑development planning.
• Collaborate with the Head of SOC to enhance processes, playbooks, detection capabilities and overall service effectiveness.

Required profile

• Strong SOC operations experience with hands‑on investigation of complex alerts at Level 2 or Level 3.
• Deep technical knowledge of SIEM, EDR, SOAR, email security, identity, cloud, endpoint and ticketing platforms.
• Broad experience across enterprise IT environments, including operating systems, networking, Active Directory and cloud services.

Required skills

• SIEM
• EDR
• SOAR
• Email security solutions
• Identity and access management tools
• Cloud platforms (e.g., AWS, Azure)
• Endpoint protection technologies
• Ticketing systems
• Operating systems (Windows, Linux)
• Networking fundamentals
• Active Directory