Security Operations Lead (GSOC)
Core
Leading daily operations for a converged cyber and physical Global Security Operations Center (GSOC), managing incident response, and guiding analysts in a highly regulated enterprise environment.
Role type
Senior IC Security Operations Lead (GSOC)
Builds
Real-time security monitoring, incident response capabilities, and operational readiness for a financial services enterprise.
Domain
Cybersecurity and Physical Security Operations
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Security operations leadership, incident response coordination, SIEM/EDR/XDR platform expertise, threat detection and investigation, managed security provider (MSSP) management, operational playbook development, security metrics analysis, cross-functional security correlation, regulated industry experience
Preferred skills
CISSP, SSCP, ITIL Foundation, GSOC/GCIH/GCED/GCIA certifications, mentoring and training experience
Technologies
SIEM, EDR, XDR, threat intelligence platforms, case management platforms
Responsibilities
Lead daily GSOC operations, security event triage, prioritization, documentation, and escalation; Provide operational leadership and guidance to Security Operations Analysts; Coordinate analyst workload, operational coverage, and shift execution; Lead real-time security event triage and maintain situational awareness during active incidents; Coordinate response activities with security teams, managed security service providers, and IT operations; Support incident documentation, timelines, lessons learned, and post-incident activities; Track operational metrics and identify opportunities to improve alert quality, escalation effectiveness, and response performance
Seniority
Senior, hands-on IC
