Security Operations Team Lead
Core
Lead a Security Operations team, serve as incident commander for major incidents, and manage an agentic SOC with AI-assisted workflows.
Role type
Senior IC security operations team lead (incident response & agentic SOC)
Builds
Agentic SOC fleet, detection playbooks, and incident response capabilities
Domain
Cloud security (AWS) & AI security operations
Deliverable
production ML models
Required skills
Incident command, team leadership, AI-assisted security workflows, AWS security architecture, Python, detection engineering, operational metrics
Preferred skills
DSPM/DLP experience, regulated environment compliance (FedRAMP/SOC 2/ISO 27001), GCIH/GCFA/CISSP certifications
Technologies
AWS, Python, SIEM, cloud telemetry
Responsibilities
Lead and coach the Security Operations team; direct response to major incidents; own the agentic SOC roadmap and metrics; manage the fleet of security agents; run the Customer Zero program; set detection and response strategy; design on-call coverage; perform hands-on investigations and build detections
Seniority
Senior, hands-on IC
