Security Operations Center (SOC) Functional Lead (Individual Contributor)
Core
Provide functional leadership, technical direction, and operational oversight for SOC capabilities to strengthen threat detection, incident response, and continuous improvement.
Role type
Senior individual contributor SOC Functional Lead
Builds
SOC operational capabilities, detection content, and incident response playbooks
Domain
Cybersecurity / SOC Operations
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
SOC operations, incident response, detection engineering, SIEM/SOAR, security frameworks, governance, compliance
Preferred skills
CISSP, CISM, GIAC (GCIA, GCED, GCIH), Microsoft SC-200 / AZ-500
Technologies
SIEM, SOAR
Responsibilities
Provide functional leadership and operational coordination for SOC activities; Lead high-severity incident response, threat detection, and continuous improvement initiatives; Guide analysts, improve playbooks and detection content, and enhance SOC processes and tooling; Partner with IT, Risk, Compliance, and business stakeholders to strengthen security posture; Track key operational metrics and support governance, risk, and compliance requirements
Seniority
Senior, hands-on IC
