{"id":2691437,"url":"https://alion.io/job/ncc-group-soc-lead","title":"SOC Lead","company":{"id":43360,"name":"NCC Group","domain":"nccgroup.com","url":"https://alion.io/company/nccgroup","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Pinpoint","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":14,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"contractor","work_mode":"remote","remote_scope":"unspecified","remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-10-15T09:02:20Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-17T21:49:37Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"We are seeking an experienced Lead SOC Analyst to oversee Security Operations Centre (SOC) activities, lead incident response efforts, and mentor a team of analysts. The successful candidate will have strong expertise in cyber threat detection, incident investigation, and the Splunk Enterprise Security (ES) platform.\nKey Responsibilities\nLead day-to-day SOC operations and provide technical guidance to SOC Analysts.\nMonitor, investigate, and respond to security incidents and alerts.\nDevelop, optimise, and maintain Splunk Enterprise Security use cases, correlation searches, dashboards, and reports.\nConduct threat hunting and advanced forensic investigations.\nCoordinate incident response activities and provide detailed post-incident analysis.\nCollaborate with IT, security, and business stakeholders to improve security posture.\nSupport SOC processes, playbooks, and continuous improvement initiatives.\n\nSkills, Knowledge and Expertise\nExtensive experience working in a SOC, Cyber Security, or Incident Response role.\nStrong hands-on experience with Splunk Enterprise Security.\nExperience leading security investigations and major incident response activities.\nKnowledge of MITRE ATT&CK, SIEM technologies, threat intelligence, and security best practices.\nRelevant certifications such as Splunk Certified Cybersecurity Defence Analyst, CISSP, GCIA, GCIH, or equivalent are desirable.\n\nBenefits\nWe have a high-performance culture which is balanced evenly with world-class well-being initiatives and benefits:\n\nFlexible Working: Balance your work and personal life with our flexible working options. \nGenerous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave. \nMedicash & Critical Illness Scheme \nFinancial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme. \nCommunity & Volunteering Programmes: Make a difference in your community with our volunteering opportunities. \nGreen Car Scheme: Drive green and save money with our eco-friendly car scheme. \nCycle Scheme: Stay fit and healthy with our cycle-to-work scheme. \nSpecial Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet. \nFamily Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.","description_format":"text","description_chars":2473,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Penetration Testing","Information Security","Managed Security"],"lifecycle":[{"event":"open","at":"2026-10-16T09:02:20Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 4 · green card filings: 1","filings_12m":4,"filings_prev_12m":6,"green_card_filings_12m":1,"median_offered_wage_usd":120500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":3}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":14,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ncc-group-soc-lead","json_url":"https://alion.io/job/ncc-group-soc-lead.json","meta":{"generated_at":"2026-10-17T23:44:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2093,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":43360},"rest":"https://alion.io/mcp/rest/get_company?id=43360"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fncc-group-soc-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fncc-group-soc-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fncc-group-soc-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ncc-group-soc-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fncc-group-soc-lead"}]}