UK security operations centres are struggling to hire and retain experienced staff. The issue is a shortage of candidates who can work effectively in live SOC environments.
Many applicants hold relevant qualifications, but fewer have practical experience with security monitoring tools, incident response and threat detection. This creates a clear gap between the number of people applying for roles and the number who can contribute quickly after joining.
Mid-level SOC analysts are in especially high demand. Candidates with several years of experience often receive interest from multiple employers, which increases salary expectations and extends hiring times. Vacant positions can leave teams under pressure and may slow the handling of security alerts.
Internal SOC roles can attract expectations of around £60,000 to £70,000 or more for experienced analysts. Managed security service providers may offer closer to £40,000 to £45,000. Shift allowances, bonuses and certification payments can increase the total cost further.
Higher starting salaries can also create retention problems. Existing employees may become dissatisfied when new hires receive better packages for similar work. Companies then face a choice between increasing pay across the team, accepting higher staff turnover or leaving positions open for longer.
The structure of SOC work adds to the problem. Continuous monitoring requires night shifts, weekend coverage and sustained attention. Analysts may spend long periods reviewing repetitive or low-priority alerts. This can lead to fatigue, lower engagement and staff leaving after 18 to 24 months.
Entry-level analysts are less likely to remain in a role when there is no clear route into threat hunting, engineering, automation or other specialist areas. Employers that fail to provide development opportunities risk losing trained staff to competitors, consultancies or outsourced security providers.
Some businesses are responding by widening their recruitment criteria. Instead of relying mainly on certifications, they are placing more emphasis on problem-solving skills, curiosity and practical ability. Candidates from IT support, networking and infrastructure roles can also be trained for SOC positions.
This approach can increase the size of the available talent pool, but it requires structured training and clear career paths. Without those measures, companies may spend money developing employees only to lose them soon afterwards.
Gattaca plc (LON:GATC) is a specialist recruitment and workforce solutions company headquartered in Fareham, UK. It provides contract and permanent staffing solutions, engineering consultancy, and statement of work (SOW) services. Brands include Matchtech, Gattaca Projects and InfoSec People.
