{"id":203728,"url":"https://alion.io/job/methods-soc-team-lead","title":"SOC Team Lead","company":{"id":6935,"name":"Methods","domain":"methods.co.uk","url":"https://alion.io/company/methods-business-and-digital-technology","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":91,"open_postings":32,"ghost_share":0,"stale_share":0.344,"repost_share":0,"time_to_fill_p50_days":43,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":92000,"max_usd":163000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":28},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ISO 27001","optional":false},{"name":"Service Desk","optional":false},{"name":"SIEM","optional":false},{"name":"Crowdstrike","optional":true},{"name":"ITIL","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-10-27T12:53:32Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-28T20:48:35Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":1},"description":"Since our establishment in 1990, Methods has partnered with a range of central government departments and agencies to transform the way the public sector operates in the UK.\nOur mission is to improve and safeguard public-facing services. We apply digital thinking to ensure the future of our public services is centered around our citizens. Our human touch sets us apart from other consultancies, system integrators and software houses - we have a customer-centric value system whereby we focus on delivering what is right for our clients.\nWe passionately support our clients in the success of their projects while working collaboratively to share skill sets and solve problems. At Methods we have fun while working hard; we are not afraid of making mistakes and learning from them.\nMethods are experts in delivering secure, resilient cyber and information services - keeping systems and data safe. We help reduce risk and vulnerabilities from cyber-attacks by developing a security road-map tailored to your unique needs. We help organisations improve processes such as threat management by building an identity management programme, and establishing prevention, detection and response capabilities to cyber-attacks.\nThe SOC Team Lead drives performance and operational excellence across Shared Service’s Cyber Services function. Acting as both a technical escalation point and line manager, they support the team in threat analysis, incident response, and security assurance activities. They foster a proactive culture of cyber hygiene and continuous improvement while collaborating across departments to strengthen Shared Service's security posture. The Team Leader also deputises for the Service Desk Manager during high workload or absence periods.\nRequirements\nOperational Oversight & Incident Coordination\nLead cyber service operations with focus on SLA attainment, incident response, and resolution quality \nOversee daily workflow distribution, prioritising emerging threats and investigative escalations \nEnsure unresolved or complex cybersecurity issues are escalated appropriately, internally and externally \nMaintain awareness of all applicable regulations and frameworks (e.g. NCSC, NIST, ISO27001, Cyber Essentials Plus) \nTeam Leadership & Development\nLine manage Cyber Analysts, setting objectives and supporting individual development plans \nModel desired behaviours that promote collaboration, precision, and accountability \nShare threat intelligence and cyber knowledge with junior colleagues \nProvide training and coaching on cyber operations tooling and security practices \nGovernance & Reporting\nContribute to root cause analysis and threat hunting strategies \nEnsure all cyber processes are documented, regularly reviewed, and updated \nSupport report production for security metrics, incident trends, and cyber control performance \nCollaborate on service review inputs relating to cyber operations and risk assurance \nStrategic Collaboration\nWork closely with the Service Desk Manager, Service Delivery Managers, Principal Cyber Analyst, and Technical Architect \nFoster strong relationships with internal stakeholders, customers, and external security partners \nContribute to development of security playbooks, standard operating procedures, and escalation pathways \nChampion a security-first mindset across Share Service operations \nEssential\nHands-on experience in a cybersecurity or service desk environment \nKnowledge of incident response frameworks, threat detection, and mitigation strategies \nStrong leadership and communication skills with the ability to guide teams in high-pressure scenarios \nExperience working with SIEM, EDR, and vulnerability management platforms \nUnderstanding of risk-based prioritisation and regulatory compliance considerations \nWillingness to support out-of-hours activities based on threat levels or response needs \nDesirable\nCertifications such as CompTIA Security+, CISSP, or equivalent \nCoaching and mentoring experience within cyber or support teams \nFamiliarity with security tooling such as Sentinel, Defender, Splunk, or CrowdStrike \nExperience contributing to GRC (Governance, Risk, Compliance) or ISO standards \nKnowledge of ITIL, NIST, or MITRE ATT&CK frameworks \nUnderstanding of customer impact and stakeholder management within cyber contexts \nBenefits\nMethods is passionate about its people; we want our colleagues to develop the things they are good at and enjoy.\nBy joining us you can expect\nAutonomy to develop and grow your skills and experience\nBe part of exciting project work that is making a difference in society\nStrong, inspiring and thought-provoking leadership\nA supportive and collaborative environment\nDevelopment - access to LinkedIn Learning, a management development programme, and training\nWellness - 24/7 confidential employee assistance programme\nFlexible Working - including home working and part time\nSocial - office parties, breakfast Tuesdays, monthly pizza Thursdays, Thirsty Thursdays, and commitment to charitable causes\nTime Off - 25 days of annual leave a year, plus bank holidays, with the option to buy 10 extra days each year\nVolunteering - 2 paid days per year to volunteer in our local communities or within a charity organisation\nPension - Salary Exchange Scheme with 4% employer contribution and 5% employee contribution\nLife Assurance - of 4 times base salary\nPrivate Medical Insurance - which is non-contributory (spouse and dependants included)\nWorldwide Travel Insurance - which is non-contributory (spouse and dependants included)\nEnhanced Maternity and Paternity Pay\nTravel - season ticket loan, cycle to work scheme\nFor a full list of benefits please visit our website (www.methods.co.uk/careers/benefits)","description_format":"text","description_chars":5720,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Flexible schedule","Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Digital Government","IT Consulting & Digital Transformation","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-09-05T03:27:59Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":43,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/methods-soc-team-lead","json_url":"https://alion.io/job/methods-soc-team-lead.json","meta":{"generated_at":"2026-10-28T22:36:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30717,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6935},"rest":"https://alion.io/mcp/rest/get_company?id=6935"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmethods-soc-team-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmethods-soc-team-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmethods-soc-team-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/methods-soc-team-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmethods-soc-team-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":203728}},{"tool":"search_jobs","arguments":{"company":"methods.co.uk","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":203728},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}