SOC Lead – Cybersecurity Operations

About the role

Inchcape Digital is looking for a hands‑on SOC Lead to drive the performance of its Global Security Operations Centre. You will lead shift teams, guide complex investigations and develop analyst capabilities while supporting the company’s low‑carbon, sustainable automotive strategy.

Key responsibilities

• Lead SOC shifts, providing operational direction to L1 and L2 analysts and ensuring alerts, incidents and escalations follow established procedures.
• Act as the primary technical escalation point for complex alerts across SIEM, EDR, email security, identity, cloud and endpoint technologies.
• Review and quality‑assure investigations, case notes and evidence collection, ensuring accuracy and proper escalation.
• Manage incident and operational escalations, prioritising based on risk, threat severity and business impact.
• Coach, mentor and develop SOC analysts through regular one‑to‑ones, feedback and career development.
• Collaborate with the Head of SOC to improve processes, playbooks, detection capabilities and reporting.

Required profile

• Strong SOC operations experience with hands‑on investigation of complex alerts at Level 2/3.
• Deep technical knowledge of SIEM, EDR, SOAR, email security, identity, cloud, endpoint and ticketing platforms.
• Broad experience with Windows and Linux OS, Active Directory, networking and cloud services.
• Ability to lead shifts, manage escalations and make sound decisions under pressure.
• Commitment to continuous improvement, operational discipline and high‑quality documentation.

Required skills

• SIEM
• EDR
• SOAR
• Email security
• Identity management
• Cloud platforms
• Endpoint protection
• Ticketing systems
• Windows OS
• Linux OS
• Active Directory
• Networking fundamentals

What we offer

• A collaborative culture that values wellbeing, growth and inclusion.
• Opportunities for continuous development and global/local rewards.
• Chance to shape the future of mobility within a leading automotive distributor.