> Markdown version of [/jobs/ext/2824488-senior-soc-lead-threat-detection-incident-response](https://www.wearedevelopers.com/jobs/ext/2824488-senior-soc-lead-threat-detection-incident-response). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior SOC Lead - Threat Detection & Incident Response

- **Company:** IBM
- **Location:** Hursley, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Security Information and Event Management, QRadar, Microsoft Sentinel, Splunk
- **Published:** September 10, 2026
- **Apply:** https://www.collegerecruiter.com/job/2840589498-senior-soc-lead--threat-detection--incident-response

## About the Role

Role requires strong SIEM experience (Microsoft Sentinel, QRadar, Splunk, Elastic), knowledge of incident response processes, and collaboration with detection/engineering teams to reduce false positives and improve playbooks.
#J-18808-Ljbffr

## Description

IBM Consulting UK FutureNow is seeking a Senior SOC Analyst to monitor, triage and respond to security threats in a 24x7 SOC. You will lead incident response activities, guide Tier 1/2 analysts, and ensure high-quality security operations across client environments.


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)