Security Operations Center (SOC) Functional Lead (Individual Contributor)
Core
Provide functional leadership, technical direction, and operational oversight for SOC capabilities, focusing on strengthening threat detection, incident response, and continuous improvement across cybersecurity operations.
Role type
Senior individual contributor functional lead
Builds
SOC operational capabilities, detection content, and incident response playbooks
Domain
Cybersecurity / Security Operations
Required skills
SOC operations, incident response, detection engineering, SIEM/SOAR, security platforms, security frameworks, governance, compliance
Preferred skills
CISSP, CISM, GIAC (GCIA, GCED, GCIH), Microsoft SC-200 / AZ-500
Technologies
SIEM, SOAR
Responsibilities
Provide functional leadership and operational coordination for SOC activities; Lead high-severity incident response, threat detection, and continuous improvement initiatives; Guide analysts, improve playbooks and detection content, and enhance SOC processes and tooling; Partner with IT, Risk, Compliance, and business stakeholders to strengthen security posture; Track key operational metrics and support governance, risk, and compliance requirements
Seniority
Senior, hands-on IC
