SOC Lead
Core
Lead incident response and threat hunting for a global EV charging network infrastructure, acting as the primary escalation point for advanced security incidents.
Role type
Senior SOC Lead (Individual Contributor)
Builds
Automated detection playbooks, SOAR workflows, and threat intelligence operationalization for global infrastructure.
Domain
Cybersecurity / Cloud Security / Incident Response
Required skills
Incident response management, Threat hunting, SIEM/SOAR administration, DLP monitoring, MITRE ATT&CK framework, Adversary emulation, Scripting/automation (Python, PowerShell, KQL), Cross-functional stakeholder coordination
Preferred skills
GCIH, GCFA, GCIA, OSCP, CySA+ certifications, Experience with nation-state threats, Business email compromise, Insider threats, Supply chain attacks
Technologies
EDR, SIEM, SOAR, DLP tools, Cloud security platforms, MITRE ATT&CK, OSINT feeds, Python, PowerShell, KQL
Responsibilities
Manage and coordinate incident response from detection through containment and post-incident review; Design and execute proactive threat hunting campaigns using endpoint, network, and cloud telemetry; Own the SIEM content lifecycle including building and tuning detection rules; Develop and automate SOC playbooks using SOAR capabilities; Oversee data exfiltration monitoring across USB, cloud, email, and AI tools; Mentor and develop SOC analysts through skill-building and purple team engagements
Seniority
Senior, hands-on IC
