SOC Lead
Core
Senior leader overseeing daily Security Operations Center (SOC) operations, incident response, and SIEM optimization to detect and mitigate cyber threats.
Role type
Senior IC SOC Lead (Technical & Operational)
Builds
SOC processes, playbooks, detection rules, and incident response strategies
Domain
Cybersecurity / Security Operations
Required skills
SIEM architecture, incident response, network security tools, cloud security platforms, scripting (Python/PowerShell), threat intelligence integration, process improvement, team mentoring, analytical problem-solving
Preferred skills
MSSP experience, advanced threat hunting, automation architecture, strategic security planning
Technologies
SIEM platforms, CrowdStrike, Carbon Black, AWS, Azure, Google Cloud, Python, PowerShell
Responsibilities
Supervise daily SOC operations and 24/7 coverage; lead investigation and resolution of security incidents; oversee SIEM configuration and tuning; mentor SOC analysts and engineers; integrate threat intelligence feeds; develop and refine SOC processes and SOPs; generate reports on incident trends and metrics; serve as primary escalation point for complex incidents; promote automation tools and scripts
Seniority
Senior, hands-on IC with leadership responsibilities