Job at a glance
Your role, your impact As a Security Operations Center (SOC) Team Lead, you’ll play a key role in protecting the organization against evolving cyber threats. Reporting to the Chief Information Security Officer, you’ll lead day-to-day security monitoring and incident response activities, provide insights to security leadership, and contribute to reducing risk and strengthening the organization's overall cyber defense posture.
Your day-to-day Lead and mentor SOC analysts, providing technical guidance, coaching, and workload coordination; Oversee real-time monitoring of security alerts from SIEM, EDR, and related security technologies; Investigate security incidents using established playbooks and act as the primary escalation point for complex incidents; Ensure accurate documentation of investigations and incident reports; Drive continuous tuning and optimization of SIEM rules, detection logic, and alerting workflows; Maintain SOC dashboards, metrics, and KPIs, reporting trends and risks to make recommendations to leadership; Support incident response exercises and ongoing SOC training activities; Contribute to the improvement of SOC processes, runbooks, and standard operating procedures; Collaborate with IT and cloud teams to ensure security monitoring and logging are integrated into new systems and services.
Keys to your success 7 to 10 years of experience in cybersecurity, security operations, or security engineering roles; Strong hands-on experience in SOC operations, threat detection, and incident response; Solid understanding of attacker tactics, techniques, and procedures, aligned with MITRE ATT&CK; Expertise in security tools including SIEM, EDR, SOAR, log analysis, and network security technologies; Demonstrated leadership experience, including team leadership, shift lead, coaching, or mentoring responsibilities; Ability to analyze complex security events and communicate findings clearly to technical and non-technical stakeholders; Strong problem-solving skills and sound judgement to handle high-severity incidents; Strong understanding of cybersecurity fundamentals, ISO 27001 controls framework, and common threat vectors.
Extra edge Experience securing cloud environments such as AWS and/or Azure; Relevant security certifications such as Security+, GCIH, GCIA, or CISSP; Experience contributing to SOC maturity initiatives, automation, or detection engineering improvements. Language skills English: Proficient