Lead SecOps (H/F)
Core
Lead SecOps responsible for incident detection/response, vulnerability management, and secure identity administration within a defense and aerospace AI subsidiary.
Role type
Senior Security Operations Lead
Builds
SOC operations, forensic investigations, vulnerability remediation, and identity governance for defense/aerospace AI solutions
Domain
Defense, Aerospace, AI, Cybersecurity
Deliverable
production ML models | infrastructure
Required skills
SIEM administration and rule creation, EDR/XDR administration, Microsoft Entra ID/Azure AD management, vulnerability management, incident response and forensics, network security protocols, security frameworks (MITRE ATT&CK, NIST CSF)
Preferred skills
CrowdStrike Falcon expertise, cloud security tools, Zero Trust implementation
Technologies
Splunk, Sentinel, CrowdStrike Falcon, Microsoft Entra ID, Azure AD, Cloudflare, SIEM, WAF, DLP
Responsibilities
Pilot SOC operations (SIEM supervision, alert triage, escalation), lead forensic investigations, maintain incident response playbooks, manage vulnerability scanning and patching, administer Microsoft Entra ID (Conditional Access, PIM, MFA), monitor Entra ID logs for anomalies, manage SSO/SCIM integrations, tune EDR/XDR policies and perform endpoint hunting, configure WAF and ZTNA
Seniority
Senior, hands-on IC