Oscar
SOC Technical Lead
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior SOC Analyst (Level 3) / Technical Lead
A rapidly scaling managed security provider is hiring the most senior technical hire in its Security Operations Centre. The SOC runs around the clock protecting clients ranging from mid-market firms to household-name enterprises - but this role sits on a standard daytime pattern, with on-call participation for genuine emergencies only.
This is the job for someone who's outgrown alert triage and wants to own the hard problems: the ransomware call at the worst possible moment, the intrusion that's been dwelling for months, the investigation that ends up in front of regulators.
Salary: £60-70k DOE + competitive package
Location: Buckinghamshire (3 days onsite)
What You'll Do:
- Lead the most serious investigations in the client portfolio - ransomware, supply-chain compromise, data breaches, insider cases - owning the full lifecycle from detection through recovery
- Make real-time containment calls under pressure and brief client leadership, up to board level, in language they can act on
- Run proactive threat hunts and build detection content across SIEM, EDR and cloud platforms, tuning out noise as you go
- Develop SOAR playbooks and automation, and help shape the SOC's tooling roadmap and architecture
- Produce evidential-standard reporting fit for auditors, regulators and law enforcement
- Mentor the analyst team and act as senior escalation point for major incidents
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What You'll Bring:
- 5+ years in incident response or SOC environments, ideally with managed services (MSSP) exposure
- A proven record leading complex investigations - ransomware and breach cases you can walk through in depth
- Advanced hands-on malware analysis capability, spanning behavioural analysis and reverse engineering
- Deep expertise across enterprise SIEM platforms and EDR tooling (CrowdStrike knowledge a strong advantage)
- A well-developed threat hunting toolkit: YARA rules, IOC development, timeline analysis and adversary profiling
- Cloud investigation experience - Azure and/or AWS incident response, log analysis and cloud-native threats
- The communication skills to translate deep technical findings for senior, non-technical audiences
- A natural mentoring style that helps junior analysts ask questions, learn and progress
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Apply now or get in touch for a confidential discussion.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills