# SOC Lead at NCC Group

NCC Group is hiring an SOC Lead. Level rates it Little AI ●○○○; you can [apply on NCC Group](https://jobsbylevel.com/go/8c961926-816a-4305-a741-2318145c723b?utm_medium=ai-agent).

AI Level 1, AI centrality 0 out of 100. Remote, Greater London.

## Details

- Company: [NCC Group](https://jobsbylevel.com/companies/ncc-group)
- AI level: AI Level 1 (score 0 out of 100)
- Location: Remote, Greater London
- Posted: October 1, 2026
- Apply: https://jobsbylevel.com/go/8c961926-816a-4305-a741-2318145c723b?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=soc-lead-at-ncc-group-829a2c

## Prepare for this job

The job page lists 5 likely interview questions for this offer, with a CV checklist: https://jobsbylevel.com/jobs/soc-lead-at-ncc-group-829a2c

## Description

We are seeking an experienced Lead SOC Analyst to oversee Security Operations Centre (SOC) activities, lead incident response efforts, and mentor a team of analysts. The successful candidate will have strong expertise in cyber threat detection, incident investigation, and the Splunk Enterprise Security (ES) platform. Key Responsibilities Lead day-to-day SOC operations and provide technical guidance to SOC Analysts. Monitor, investigate, and respond to security incidents and alerts. Develop, optimise, and maintain Splunk Enterprise Security use cases, correlation searches, dashboards, and reports. Conduct threat hunting and advanced forensic investigations. Coordinate incident response activities and provide detailed post-incident analysis. Collaborate with IT, security, and business stakeholders to improve security posture. Support SOC processes, playbooks, and continuous improvement initiatives. Skills, Knowledge and Expertise Extensive experience working in a SOC, Cyber Security, or Incident Response role. Strong hands-on experience with Splunk Enterprise Security . Experience leading security investigations and major incident response activities. Knowledge of MITRE ATT&CK, SIEM technologies, threat intelligence, and security best practices. Relevant certifications such as Splunk Certified Cybersecurity Defence Analyst, CISSP, GCIA, GCIH, or equivalent are desirable.

Source: https://jobsbylevel.com/jobs/soc-lead-at-ncc-group-829a2c

## Cite this page

Level. https://jobsbylevel.com/jobs/soc-lead-at-ncc-group-829a2c.

Get job alerts: https://jobsbylevel.com/newsletter