SOC Lead

About the role

Inchcape Digital is looking for a hands‑on SOC Lead to drive the performance of its Global Security Operations Centre. You will lead shift teams, manage complex incidents and develop the capabilities of a diverse analyst workforce.

Key responsibilities

• Lead SOC shifts, providing operational direction to L1 and L2 analysts and ensuring alerts, investigations and escalations follow established procedures.
• Act as the primary technical escalation point for complex security alerts across SIEM, EDR, email security, identity, cloud and endpoint platforms.
• Review and quality‑assure analyst investigations, case notes and evidence collection, ensuring accuracy and appropriate escalation.
• Manage incident escalations, prioritising based on risk, threat severity and business impact while keeping the Head of SOC informed.
• Coach, mentor and develop SOC analysts through regular one‑to‑ones, feedback and career‑development planning.

Required profile

• Strong SOC operations experience with hands‑on investigation of complex alerts at Level 2/3.
• Deep technical knowledge of SIEM, EDR, SOAR, email security, identity, cloud, endpoint and ticketing platforms.
• Ability to lead shifts, manage escalations and make sound operational decisions under pressure.
• Understanding of common attack techniques, incident response processes and threat intelligence.

Required skills

• SIEM
• EDR
• SOAR
• Email security
• Identity and access management
• Cloud security platforms
• Endpoint protection
• Ticketing systems
• Windows and Linux operating systems
• Active Directory
• Networking fundamentals
• Authentication and cloud technologies

What we offer

• A collaborative culture that values wellbeing, growth and inclusion.
• Opportunities for continuous learning and career development.
• Global and local rewards, including impact‑driven work and a supportive environment.