> Markdown version of [/jobs/ext/2259316-soc-technical-lead](https://www.wearedevelopers.com/jobs/ext/2259316-soc-technical-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SOC Technical Lead - **Company:** DGH Recruitment - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Domain Name System Security Extensions, Intrusion Detection Systems, Log Analysis, Security Information and Event Management, Data Logging, Google Cloud, Kubernetes, Information Technology, Security Orchestration, Automation & Response - **Published:** August 26, 2026 - **Apply:** https://www.collegerecruiter.com/job/2815065320-soc-technical-lead ## About the Role * 8+ years of hands-on experience in information security related responsibilities with a strong focus on SOC engineering, incident response, and threat detection/hunting. * In-depth knowledge of IR/SOC monitoring, alerting and investigation tools platforms, process, and architecture * Experience working with cloud security technologies (AWS, Azure DevOps, Kubernetes, GCP, etc) including cloud log analysis, monitoring, detection, and incident response. * Experience with SOC use of SIEM, SOAR, IDS/IPS, DLP, and Endpoint security. ## Description Get AI-powered advice on this job and more exclusive features. This range is provided by DGH Recruitment. Your actual pay will be based on your skills and experience - talk with your recruiter to learn more. Base pay range Direct message the job poster from DGH Recruitment Role SOC Technical Lead (Incident Response / GIAC) Please note: This role will require 4 days per week on site. Overview Reporting into the Security Operations Centre Senior Manager, the role will develop and integrate the Incident Response (IR) / SOC security infrastructure to monitor both on premise and cloud environments. The role will serve as a critical bridge between operations and engineering. Responsibilities * Drive and improve continuous monitoring and incident response, serving as a senior resource in the SOC and Incident Response processes. * Configure and integrate platforms, tools, service providers, and solutions into IR/SOC systems, make recommendations as needed. * Consolidate and improve security logging and monitoring solutions on premise and in the cloud to detect and respond to security threats in real time. * Drive efforts to automate and accelerate the detection and response processes. * Ensure integration of input from the deployed suite of security tools to SOC systems (e.g. SIEM/SOAR), including, but not limited to, IDS/IPS, End Point Protection, MDR/XDR, PAM, MFA, DNS Security, and cloud security posture management. Required Skills / Experience * 8+ years of hands-on experience in information security related responsibilities with a strong focus on SOC engineering, incident response, and threat detection/hunting. * In-depth knowledge of IR/SOC monitoring, alerting and investigation tools platforms, process, and architecture * Experience working with cloud security technologies (AWS, Azure DevOps, Kubernetes, GCP, etc) including cloud log analysis, monitoring, detection, and incident response. * Experience with SOC use of SIEM, SOAR, IDS/IPS, DLP, and Endpoint security. Seniority level * Mid-Senior level Employment type * Full-time Job function * Information Technology Industries * Professional Services and Legal Services City Of London, England, United Kingdom - notice of opportunities and postings may be shown for location relevance. Referrals increase your chances of interviewing at DGH Recruitment by 2x We're unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI. ## Related Videos - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Progressive Delivery in Kubernetes](https://www.wearedevelopers.com/videos/949-progressive-delivery-in-kubernetes) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) - [Developers Communities in San Francisco - WeAreDevelopers LIVE from Corgi Cafe](https://www.wearedevelopers.com/videos/2144-developers-communities-in-san-francisco-wearedevelopers-live-from-corgi-cafe) - [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing) ## Related Articles - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)