# SOC Lead at Nccgroup

> Remote · United Kingdom · Staff · Other · open. Source: https://alderhq.app/jobs/pinpoint%3Anccgroup%3A551504 (read 2026-11-04).

## Facts (observed)

- Company: [Nccgroup](https://alderhq.app/companies/nccgroup)
- Location text: GBR Remote, Greater London
- Where it can be done from (inferred): Remote · United Kingdom (evidence: "Location: GBR Remote, Greater London")
- Posted: already open when tracking began; date unknown
- First seen by alder: 2026-11-04 · last verified: 2026-11-04
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://nccgroup.pinpointhq.com/en/postings/d60524d5-e4e8-4717-b70d-f22a3c37fcff

## Pay and sponsorship

- Posted pay: not posted
- Market band for similar posted roles (London, n 53): p25 £69k, median £105k, p75 £142k

## Description (the employer's text)

We are seeking an experienced Lead SOC Analyst to oversee Security Operations Centre (SOC) activities, lead incident response efforts, and mentor a team of analysts. The successful candidate will have strong expertise in cyber threat detection, incident investigation, and the Splunk Enterprise Security (ES) platform.

### Responsibilities

- Lead day-to-day SOC operations and provide technical guidance to SOC Analysts.
- Monitor, investigate, and respond to security incidents and alerts.
- Develop, optimise, and maintain Splunk Enterprise Security use cases, correlation searches, dashboards, and reports.
- Conduct threat hunting and advanced forensic investigations.
- Coordinate incident response activities and provide detailed post-incident analysis.
- Collaborate with IT, security, and business stakeholders to improve security posture.
- Support SOC processes, playbooks, and continuous improvement initiatives.
### Skills

- Extensive experience working in a SOC, Cyber Security, or Incident Response role.
- Strong hands-on experience with Splunk Enterprise Security.
- Experience leading security investigations and major incident response activities.
- Knowledge of MITRE ATT&CK, SIEM technologies, threat intelligence, and security best practices.
- Relevant certifications such as Splunk Certified Cybersecurity Defence Analyst, CISSP, GCIA, GCIH, or equivalent are desirable.
### Benefits

We have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits:

- Flexible Working: Balance your work and personal life with our flexible working options.
- Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave.
- Medicash & Critical Illness Scheme
- Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.
- Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
- Green Car Scheme: Drive green and save money with our eco-friendly car scheme.
- Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.
- Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.
- Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/pinpoint%3Anccgroup%3A551504 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.