Senior SOC Manager – Managed Cyber Defence

Line of Service

Assurance

Industry/Sector

Not Applicable

Specialism

Risk

Management Level

Senior Manager

Job Description & Summary

About the role: 

We are seeking a Senior Manager to lead the day-to-day technical delivery of our Managed Cyber Defence services. This role has direct responsibility for Analysis and Engineering teams, ensuring the effective running, stability, and continuous improvement of a 24/7 client facing cyber defence capability.

The role will focus on the operational delivery of services across a range of security platforms, including Microsoft Defender/Sentinel, Palo Alto Networks Cortex XDR/XSIAM, Google SecOps & CrowdStrike Falcon.

You will play a key role in ensuring services are efficient, resilient, and continuously improving - working closely with internal teams to evolve detection, response, and automation capabilities.

What your days will look like: 

• Lead day‑to‑day operations across Analysis and Engineering teams delivering Managed Cyber Defence services.
• Ensure service stability, performance, and quality across client environments, acting as a senior escalation point for incidents and technical issues.
• Manage prioritisation and workload across teams, including leadership of complex client incidents and investigations.
• Own and optimise the security technology stack (primarily Microsoft Sentinel and Defender), driving effective use of AI and automation in the SOC.
• Identify opportunities to improve efficiency through automation and work closely with automation teams to evolve capabilities.
• Oversee operational reporting and support ongoing client interactions related to service delivery and performance.
• Provide technical leadership, maintain awareness of relevant security technologies, and drive continuous improvements in detection, response, and key SOC metrics (MTTD, MTTR, automation coverage).

The role is for you if:

• You have experience of embedding AI tooling within a SOC environment
• Experience with Microsoft Sentinel and Defender and strong knowledge of KQL.
• Experience in SOC, XDR, or managed security environments.
• Familiarity with Palo Alto, CrowdStrike, or Google tools is beneficial.
• Security operations, incident response, detection engineering.
• Cloud (Azure preferred), automation concepts.
• Experience leading technical teams in live service environments.
• Desirable: SC‑200 and/or GIAC certifications.

What you’ll receive from us: 

No matter where you may be in your career or personal life, our benefits are designed to add value and support, recognising and rewarding you fairly for your contributions. 

We offer a range of benefits including empowered flexibility and a working week split between office, home and client site; private medical cover and 24/7 access to a qualified virtual GP; six volunteering days a year and much more. 

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Accepting Feedback, Accepting Feedback, Active Listening, Analytical Thinking, Cloud Security, Coaching and Feedback, Communication, Conducting Research, Creativity, Cyber Defense, Cyber Threat Intelligence, Embracing Change, Emotional Regulation, Empathy, Encryption, Inclusion, Influence, Information Security, Intellectual Curiosity, Intelligence Analysis, Intelligence Report, Intrusion Detection, Intrusion Detection System (IDS), IT Operations, Learning Agility {+ 24 more}

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Up to 20%

Available for Work Visa Sponsorship?

No

Government Clearance Required?

Yes

Job Posting End Date