
Search by job, company or skills
About The Role
Our client is seeking a SOC Lead to oversee day-to-day Security Operations across enterprise, cloud, and research environments. This role is responsible for monitoring effectiveness, incident response coordination, operational process maturity, and analyst development. This role collaborates closely and contributes to detection improvement efforts when operational capacity allows.
Responsibilities
• Oversee daily SOC operations including monitoring, triage, escalation, and incident response.
• Serve as incident commander during high-severity security events.
• Ensure playbooks, escalation paths, documentation and response processes are effective.
• Coordinate with the Detection Lead to provide feedback on alert quality and coverage gaps.
• Contribute to detection tuning and rule refinement.
• Mentor SOC analysts and elevate investigative capabilities.
• Develop operational metrics and reporting for leadership.
• Drive continuous improvement in SOC efficiency and response readiness.
Qualifications
• 5+ years of experience in security operations or incident response and 1+ years of experience leading a team
• Experience leading investigations and coordinating response efforts.
• Strong understanding of SIEM, EDR, and cloud security monitoring platforms.
• Experience tuning detection rules and improving alert fidelity.
• Strong knowledge of enterprise networking and identity systems.
• Experience working cross-functionally with detection engineering teams.
• Strong leadership and communication skills.
Job ID: 146406727