Lead SOC Analyst

Join a growing Cybersecurity company as a Lead SOC Analyst in Cardiff.

Threat actors don't take weekends off, and the businesses defending against them need people who can lead under pressure, not just react to it. This Cardiff-based cybersecurity firm has built a reputation for catching what others miss. As the company scales, it needs a Lead SOC Analyst who can sharpen its detection capability and bring structure to a team that's growing fast.

This Lead SOC Analyst role sits at the centre of that effort. You'll own the operational rhythm of the SOC, mentor analysts, and make the calls that matter when an incident lands at 2am.

Here's what you'll be doing

Leading day-to-day SOC operations, triaging and escalating security incidents across the monitored estate

Mentoring Tier 1 and Tier 2 analysts, reviewing their investigations and sharpening detection logic

Running root cause analysis on confirmed incidents and writing up findings for clients and internal stakeholders

Tuning SIEM rules and playbooks so the team catches more, faster, with fewer false positives

Coordinating incident response during active threats, from containment through to lessons learned

Reporting on SOC performance and threat trends to senior management on a regular cycle

Here are the skills you'll need

Solid hands-on experience with SIEM platforms (Splunk, Sentinel, QRadar or similar) and EDR tools

A working grasp of threat intelligence, MITRE ATT&CK, and incident response frameworks

Proven ability to lead or mentor junior analysts, not just supervise them

Calm decision-making under pressure. Incidents don't wait for a good moment

Strong written communication. You'll need to explain technical findings to people who aren't technical

A relevant certification (SANS, CISSP, CompTIA Security+ or similar) is a strong plus

Key perks and benefits

£48,000 to £57,000 depending on experience, plus bonus scheme

Hybrid working, based out of Cardiff with flexibility built in

Private medical insurance and pension contribution

Generous annual leave and genuinely flexible working, not just a line in the handbook

Clear progression path within a company that's actively growing, not standing still

Why pursue a career in Cybersecurity?

Cybersecurity isn't slowing down. Every new system, every cloud migration, every remote worker adds another door that needs watching, and the demand for people who can lead a SOC rather than just staff one keeps climbing. Cardiff has quietly become a serious hub for this industry, with a growing cluster of security and tech employers putting down roots there. Good analysts get noticed. Good leaders get promoted.

This Lead SOC Analyst opportunity is brought to you by The Opportunity Hub UK.

By applying, you acknowledge that The Opportunity Hub may retain your details and consider you for other suitable opportunities. You may opt out at any time.

Privacy Notice

theohub.global/privacy