About this role
SOC Manager
A good SOC Manager keeps the lights on. A great one improves the entire operation.
I'm working with a business looking for someone who can do both.
This role sits at the centre of a 24/7 Managed Detection & Response function. You'll lead the analysts, own client delivery, handle major incidents and drive the standards that the SOC is measured against.
This isn't about watching dashboards from a distance. You'll be expected to challenge thinking, improve processes and make sure the service continues to evolve.
What you'll be doing
- Owning the delivery of MDR services across a portfolio of clients
- Leading and developing SOC Analysts and Senior SOC Analysts
- Acting as the senior escalation point for clients and internal teams
- Running service reviews and presenting risks, trends and recommendations to stakeholders
- Managing major incidents and ensuring clear communication throughout
- Improving detection coverage, reducing false positives and raising investigation quality
- Working closely with engineers to develop new detection use cases and response capabilities
- Using operational data to spot weaknesses and continuously improve the service
- Building scalable processes, playbooks and operating procedures
- Supporting pre-sales activity, service design and client growth opportunities
What we're looking for
- Experience leading a Security Operations Centre or MDR service
- Strong understanding of incident response, threat detection and security monitoring
- A technical background that allows you to challenge investigations and guide analysts
- Experience managing clients and presenting to senior stakeholders
- Someone who takes ownership rather than waits for permission
- Calm decision-making during high-pressure incidents
- Commercial awareness and an understanding of balancing quality, service and delivery
You'll do well here if...
- You enjoy building and improving things rather than maintaining the status quo
- You're comfortable making decisions without a playbook for everything
- You genuinely care about developing people
- You can switch between technical conversations and boardroom discussions without missing a beat
This is a role for someone who wants real ownership of a security operation, not someone looking to sit above the work and manage spreadsheets.
If you've led SOC teams, enjoy solving problems and want the freedom to improve how things are done, let's talk.
About cyber security & digital forensics roles for ex-police
Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.
See all cyber security & digital forensics jobs in London →Why this fits a police background — match score 90/100
- Incident command & response
- Investigative casework
- Security operations
What cyber security & digital forensics roles pay ex-police
Advertised UK ranges, editorial estimates reviewed July 2026
| Digital forensics analyst | £32,000–£45,000 |
| DFIR consultant | £45,000–£65,000 |
| Senior forensics / IR specialist | £60,000–£80,000 |
| Threat-intelligence specialist | £55,000–£80,000 |