SOC Team Lead

Company: NTT DATA
Apply for the SOC Team Lead
Location: London
Job Description:

Overview

As Security Operations Team Lead, you oversee the SOC’s day-to-day delivery, guiding analysts and engineers to detect and respond to threats. You ensure service quality, incident handling, and continuous improvement within established frameworks. You collaborate with cross-functional teams to maintain 24/7 coverage and safeguard client environments. This role offers impact through optimized security operations and timely threat resolution, contributing to NTT DATA’s mission of responsible innovation.

Responsibilities

  • Manage SOC operations and delivery of managed security services to clients
  • Monitor performance against SLAs/KPIs to ensure high-quality execution
  • Implement incident management, threat monitoring, and vulnerability procedures
  • Serve as escalation point for client concerns and day-to-day issues
  • Lead incident response efforts and coordinate with senior SOC staff
  • Mentor and develop SOC analysts; organize 24/7 coverage if applicable
  • Identify process improvements and support automation initiatives
  • Collaborate with stakeholders and contribute to client reports and incident summaries
  • Maintain awareness of emerging threats and ensure appropriate measures

Key requirements

  • 5+ years in Security Operations Centre or related security environment
  • At least 2 years in a team lead or supervisory role
  • Strong understanding of incident detection, escalation, and resolution processes
  • Experience with SIEM, IDS/IPS, endpoint protection, and threat intelligence platforms
  • Ability to manage team performance and guide junior staff
  • Excellent verbal and written communication skills
  • Strong attention to detail and commitment to quality
  • Relevant certifications (e.g., CompTIA Security+, GCIH, SSCP, CEH); CISSP or CISM is a plus but not mandatory
  • Eligible for UK SC clearance
  • excellent communication
  • attention to detail
  • leadership and mentoring
  • SIEM
  • IDS/IPS
  • endpoint protection

…

Posted: November 1st, 2026