SOC Team Lead

2 months ago

Leeds, United Kingdom BlueVoyant Full time

SOC Team Lead

Location: This position is ideally in Leeds/Hybrid


The schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3 days on, 2 days off, 2 days on, 3 days off). Every 4 weeks, it will change from the day to the night shift.


BlueVoyant is looking for Security Operations Center (SOC) Team Lead to help our global customers manage their IT security. You will be part of a fast-paced team that helps customers to reduce the impact of security incidents and ensures that critical business operations continue unhindered.


BlueVoyant SOC Team Leads are the first line leaders tasked with enabling efficient, world-class teams to defend clients from adversaries. As a technical expert and defensive strategist, you’ll be instrumental in guiding analysts through active intrusions, aiding clients in taking action, and building a culture of client-first detection and response.


Key Responsibilities

As a team lead the success of the team relies on your expertise to spot and respond to attacks before adversaries gain a foothold. Your visibility over incoming alerts allows you to spot trends, prioritize analysis work, and define the gold standard of analyst work.


As a Team Lead, you’ll directly supervise analysts on your shift, providing mentorship, workflow assistance, quality and performance reviews, and provide excellent customer service.

  • Supervise and mentor Security Analysts during a standard working team/shift which includes scheduling, PTO, and working with peers to ensure adequate coverage
  • Manage analyst workload and workflows while acting as an escalation point for your team
  • Communicate with BlueVoyant clients throughout incident escalations and service delivery questions or concerns
  • Supervise operations in deterring, identifying, monitoring, investigating, and analyzing attacks
  • Support analyst alert triage to identify whether appropriate escalations occurred, and monitor for patterns indicating late-stage incident lifecycle alerts requiring incident response
  • Provide quality control and feedback for analyst investigations
  • Participate in the response, investigation, and resolution of security incidents
  • Ensure teams are aware of operating procedures and any changes or additions
  • Aid in keeping operational documentation up to date
  • Provide incident investigation, handling, and response, including incident documentation
  • Serve as the technical escalation point and mentor for your analyst team
  • Perform triage of incoming issues (assess the priority, determine risk)
  • Maintain a strong awareness of the current threat landscape


Basic Qualifications

People Skills:

  • Strong teamwork and interpersonal skills, including the ability to work effectively with a globally distributed team
  • Able and willing to work in a 24/7/365 environment, including nights and weekends, on a rotating shift schedule
  • Experience managing technical individual contributors, including providing feedback, monitoring quality, and prioritizing work
  • Strong customer communications skills, including articulating complex or urgent technical data and scenarios to non-technical audiences
  • Ability to handle high pressure situations in a productive and professional manner


Tech Skills:

  • Knowledge of and experience with intrusion detection/prevention systems and SIEM software
  • Advanced knowledge and understanding of network protocols and devices.
  • Advanced experience with Mac OS, Windows, and Unix systems.
  • Ability to analyze event logs and recognize signs of cyber intrusions/attacks
  • Advanced written and verbal communication skills and the ability to present complex technical topics in clear and easy-to-understand language
  • Familiarity with tools such as Malware Sandboxes, Sentinel, Splunk, EDR solutions
  • Strong knowledge of the following:
  • Enterprise Cloud Solutions (Azure, GCP, AWS)
  • Modern authentication systems and attacks (SSO, OATH, Entra, etc.)
  • SIEM workflows (preferably Sentinel and Splunk)
  • Packet Analysis
  • Malware Detection, to include dynamic and light static analysis
  • Network Monitoring metadata (web logs, firewall logs, WAF/IDS)
  • Email Security and common business email compromise attacks
  • Vulnerability Identification and correlation to attacker behavior


Preferred Qualifications

  • Experience in network/host vulnerability analysis, intrusion analysis, digital forensics, penetration testing, or related areas
  • 5+ years of hands-on SOC/TOC/NOC experience
  • GIAC certification(s) strongly preferred. CISSP, Security +, Network +, CEH, RHCA, RHCE, MCSA, MCP, or MCSE preferred
  • Familiarity with technologies such as Sentinel, Splunk, Microsoft Defender suites, Crowdstrike Falcon, SentinelOne
  • Familiarity with Group Policy, Intune, Virtualization, and other IT Infrastructure tools
  • Understanding and/or experience with one or more of the following programming languages: JavaScript, Python, Lua, Ruby, GoLang, Rust


Education

  • Minimum bachelor’s degree in Information Security, Computer Science, or other IT-related field or equivalent experience


About BlueVoyant

At BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem. Accuracy Actionability Timeliness Scalability


Led by CEO, Jim Rosenthal, BlueVoyant’s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies.


Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America.


All employees must be authorized to work in the United Kingdom. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.


  • SOC Team Lead

    2 months ago

    Leeds, United Kingdom BlueVoyant Full time

    SOC Team Lead Location: This position is ideally in Leeds/Hybrid The schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3 days on, 2 days off, 2 days on, 3 days off). Every 4 weeks, it will change...

  • SOC Team Lead

    2 months ago

    Leeds, United Kingdom BlueVoyant Full time

    SOC Team LeadLocation: This position is ideally in Leeds/HybridThe schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3 days on, 2 days off, 2 days on, 3 days off). Every 4 weeks, it will change from...

  • SOC Team Lead

    2 months ago

    Leeds, United Kingdom BlueVoyant Full time

    SOC Team LeadLocation: This position is ideally in Leeds/HybridThe schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3 days on, 2 days off, 2 days on, 3 days off). Every 4 weeks, it will change from...

  • SOC Team Lead

    4 weeks ago

    Leeds, United Kingdom BlueVoyant Full time

    SOC Team Lead Location: This position is ideally in Leeds/Hybrid The schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3 days on, 2 days off, 2 days on, 3 days off). Every 4 weeks, it will...

  • SOC Team Lead

    2 months ago

    Leeds, United Kingdom BlueVoyant Full time

    SOC Team Lead Location: This position is ideally in Leeds/Hybrid The schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3 days on, 2 days off, 2 days on, 3 days off). Every 4 weeks, it will change...

  • SOC Team Lead

    2 months ago

    Leeds, United Kingdom BlueVoyant Full time

    SOC Team LeadLocation: This position is ideally in Leeds/HybridThe schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3 days on, 2 days off, 2 days on, 3 days off). Every 4 weeks, it will change from...

  • SOC Team Lead

    3 weeks ago

    Leeds, UK, West Yorkshire, United Kingdom BlueVoyant Full time

    SOC Team LeadLocation: This position is ideally in Leeds/HybridThe schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3 days on, 2 days off, 2 days on, 3 days off). Every 4 weeks, it will change from...

  • Junior SOC Analyst

    2 months ago

    Leeds, United Kingdom CV-Library Full time

    Junior SOC Analysts have responsibility for leading incident response efforts, monitoring security events, analysing logs and data for threats, providing proactive threat intelligence, managing security tools, mentoring shift leads, preparing comprehensive incident reports, conducting security assessments, coordinating incident handling, promoting security...

  • SOC Operations Manager

    4 days ago

    Leeds, Leeds, United Kingdom BlueVoyant Full time

    We are seeking a highly skilled SOC Operations Manager to lead our team of security analysts. As a key member of our incident response team, you will be responsible for guiding analysts through active intrusions and aiding clients in taking action.As a seasoned cyber security professional, you will have extensive experience in managing technical individual...

  • Junior SOC Analyst

    2 weeks ago

    Leeds, West Yorkshire, LS1, Leeds, United Kingdom BAE Full time

    Location(s): UK, Europe & Africa : UK : Leeds BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding...

  • Junior SOC Analyst

    2 weeks ago

    Leeds, West Yorkshire, LS1, Leeds, United Kingdom BAE Full time

    Location(s): UK, Europe & Africa : UK : Leeds BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding...

  • Nightshift Team Lead

    6 days ago

    Leeds, Leeds, United Kingdom G4S Business Unit:US Youth Services Full time

    Job OverviewThe Security Operations Centre (SOC) is a critical component of G4S Business Unit:US Youth Services' operations, providing 24/7 support to field-based personnel. As a Nightshift Team Lead, you will be responsible for ensuring the health, safety, and welfare of our staff, as well as supporting operational management teams across the country.Key...

  • Cyber Security Operations Center Lead

    4 weeks ago

    Leeds, Leeds, United Kingdom BlueVoyant Full time

    Job DescriptionCyber Security Operations Center LeadAt BlueVoyant, we're looking for an exceptional Cyber Security Operations Center Lead to join our team. As a key member of our operations team, you'll be responsible for leading our Security Operations Center (SOC) to ensure the highest level of security for our clients.About the RoleLead our SOC team in...

  • Security Operations Specialist

    4 days ago

    Leeds, Leeds, United Kingdom Claranet Full time

    Job Title:Junior SOC AnalystAbout the Role:We are seeking a highly skilled Junior SOC Analyst to join our team at Claranet. As a Junior SOC Analyst, you will play a vital role in protecting our organisation and enhancing security operations to mitigate risks effectively.This position involves leading incident response efforts, monitoring security events,...

  • Junior Cybersecurity Specialist

    6 days ago

    Leeds, Leeds, United Kingdom Claranet Full time

    Role OverviewThe Junior Cybersecurity Specialist will be responsible for leading incident response efforts, monitoring security events, analysing logs and data for threats, providing proactive threat intelligence, managing security tools, mentoring shift leads, preparing comprehensive incident reports, conducting security assessments, coordinating incident...

  • Capability Lead

    6 months ago

    Leeds, United Kingdom BAE Systems Full time

    **Location(s): UK, Europe & Africa : UK : Leeds** BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding...

  • Security Operations Specialist

    5 days ago

    Leeds, Leeds, United Kingdom Claranet Full time

    Job DescriptionWe are seeking a highly skilled Junior Threat Intelligence Analyst to join our team in Leeds. As a key member of our Security Operations Centre (SOC), you will be responsible for leading incident response efforts, monitoring security events, analysing logs and data for threats, and providing proactive threat intelligence.This role is critical...

  • Team leader

    2 months ago

    Leeds, United Kingdom BlueVoyant Full time

    SOC Team Lead Location: This position is ideally in Leeds/Hybrid slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. Every 4 weeks, it will change from the day to the night shift. BlueVoyant is looking for Security Operations Center (SOC) Team Lead to help our global customers manage their IT security. You...

  • Team leader

    2 months ago

    Leeds, United Kingdom BlueVoyant Full time

    SOC Team Lead Location: This position is ideally in Leeds/Hybrid slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. Every 4 weeks, it will change from the day to the night shift. BlueVoyant is looking for Security Operations Center (SOC) Team Lead to help our global customers manage their IT security. You...

  • Team leader

    3 weeks ago

    Leeds, United Kingdom BlueVoyant Full time

    SOC Team Lead Location: This position is ideally in Leeds/Hybrid slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. Every 4 weeks, it will change from the day to the night shift. BlueVoyant is looking for Security Operations Center (SOC) Team Lead to help our global customers manage their IT security. You will be...