SOC Lead

• Lead and manage a team of SOC L1, L2, and L3 security analysts.
• Monitor security alerts, events, and incidents using SIEM platforms.
• Manage incident detection, investigation, escalation, containment, and remediation.
• Oversee 24/7 SOC operations, shift schedules, and incident escalation processes.
• Conduct threat hunting and analyze suspicious network activities.
• Develop and maintain incident response procedures, playbooks, and SOPs.
• Ensure timely resolution of security incidents according to defined SLAs.
• Perform root cause analysis (RCA) for major security incidents.
• Coordinate with IT, networking, cloud, and infrastructure teams to resolve security threats.
• Improve detection rules, alert correlation, and SOC monitoring capabilities.
• Prepare daily, weekly, and monthly SOC performance reports.
• Conduct security awareness sessions and mentor junior SOC analysts.
• Support compliance activities and security audits.
• Stay updated on emerging cyber threats, vulnerabilities, and attack techniques.

Requirements

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 5–8 years of experience in cybersecurity or SOC operations, including team leadership experience.
• Strong hands-on experience with SIEM tools such as Splunk, IBM QRadar, Microsoft Sentinel, or ArcSight.
• Knowledge of EDR/XDR solutions such as CrowdStrike, Microsoft Defender, or SentinelOne.
• Strong understanding of network security, firewalls, IDS/IPS, VPNs, and endpoint security.
• Experience in security incident handling, malware analysis, and threat investigation.
• Familiarity with the MITRE ATT&CK framework and cyber kill chain.
• Understanding of TCP/IP, DNS, HTTP/HTTPS, and network protocols.
• Knowledge of vulnerability assessment and management tools such as Nessus, Qualys, or Rapid7.
• Experience with threat intelligence platforms and security automation tools.
• Strong analytical, troubleshooting, communication, and leadership skills.