SOC Lead - Cyber Security Operations - VOIS
Core
Lead and manage 24x7 SOC operations, ensuring consistent, high-quality alert monitoring, triage, and incident response across all markets while driving automation and AI-driven capabilities.
Role type
Senior IC SOC Lead (Cyber Defence Operations)
Builds
Global SOC monitoring and response services for Vodafone Group
Domain
Cyber Security Operations / Incident Response
Deliverable
production ML models
Required skills
SOC leadership, incident response, SIEM platforms (Splunk, Microsoft Sentinel, Google SecOps, ArcSight, QRadar), EDR/NDR technologies, SOAR, automation, AI-enabled security, network security, endpoint security, cloud security, MITRE ATT&CK framework
Preferred skills
GIAC, CISSP, vendor-specific SOC certifications, AI/ML in security
Technologies
Splunk, Microsoft Sentinel, Google SecOps, ArcSight, QRadar, SOAR, EDR, NDR
Responsibilities
Lead 24x7 SOC operations and manage alert lifecycle; Drive SOC service performance against KPIs (MTTT, MTTR, SLA); Oversee investigation, containment, and escalation; Enhance detection capabilities via SIEM use cases and playbooks; Drive adoption of automation and AI-assisted capabilities; Build and coach high-performing SOC team; Act as final escalation point for complex incidents; Deliver data-driven reporting to senior leadership.
Seniority
Senior, hands-on IC
