[LTA-ITCD] LEAD /PRINCIPAL CYBER ENGINEER (SOC PRODUCT LEAD)
Core
Strategic owner of the Cybersecurity Operations Centre's detection and monitoring capabilities, bridging business risk, compliance, and the threat landscape to define a prioritized roadmap for the SOC.
Role type
Principal Cyber Engineer (SOC Product Lead)
Builds
SOC capability roadmap, detection use cases, automation workflows, and analyst enablement initiatives
Domain
Cybersecurity Operations, Threat Intelligence, Financial Services
Deliverable
production ML models | product features | dashboards & analysis
Required skills
Security monitoring and detection operations, MITRE ATT&CK framework, SIEM platforms, SOAR, EDR, threat intelligence platforms, cloud security monitoring, stakeholder management, roadmap ownership, vendor management, budget accountability, KPI definition, regulatory compliance alignment
Preferred skills
Microsoft Sentinel, Azure, AWS, regulated environment experience
Technologies
SIEM, SOAR, EDR, threat intelligence platforms, Microsoft Sentinel, Azure, AWS
Responsibilities
Define and refine the SOC capability roadmap and maintain a prioritized product backlog; Translate business risk and compliance requirements into actionable detection use cases and acceptance criteria; Conduct threat landscape assessments and prioritize detection development based on threat actor relevance; Lead vendor evaluations, RFP processes, and manage the SOC technology portfolio and budget; Define and report on SOC KPIs and operational metrics to leadership; Ensure SOC monitoring coverage aligns with regulatory frameworks and compliance requirements
Seniority
Principal, strategy & mentorship