SOC Lead

• 
  

  Lead and manage a team of SOC L1, L2, and L3 security analysts.
  
  

  
  


• 
  

  Monitor security alerts, events, and incidents using SIEM platforms.
  
  

  
  


• 
  

  Manage incident detection, investigation, escalation, containment, and remediation.
  
  

  
  


• 
  

  Oversee 24/7 SOC operations, shift schedules, and incident escalation processes.
  
  

  
  


• 
  

  Conduct threat hunting and analyze suspicious network activities.
  
  

  
  


• 
  

  Develop and maintain incident response procedures, playbooks, and SOPs.
  
  

  
  


• 
  

  Ensure timely resolution of security incidents according to defined SLAs.
  
  

  
  


• 
  

  Perform root cause analysis (RCA) for major security incidents.
  
  

  
  


• 
  

  Coordinate with IT, networking, cloud, and infrastructure teams to resolve security threats.
  
  

  
  


• 
  

  Improve detection rules, alert correlation, and SOC monitoring capabilities.
  
  

  
  


• 
  

  Prepare daily, weekly, and monthly SOC performance reports.
  
  

  
  


• 
  

  Conduct security awareness sessions and mentor junior SOC analysts.
  
  

  
  


• 
  

  Support compliance activities and security audits.
  
  

  
  


• 
  

  Stay updated on emerging cyber threats, vulnerabilities, and attack techniques.
  
  

  
  

Requirements

• 
  

  Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
  
  

  
  


• 
  

  5–8 years of experience in cybersecurity or SOC operations, including team leadership experience.
  
  

  
  


• 
  

  Strong hands-on experience with SIEM tools such as Splunk, IBM QRadar, Microsoft Sentinel, or ArcSight.
  
  

  
  


• 
  

  Knowledge of EDR/XDR solutions such as CrowdStrike, Microsoft Defender, or SentinelOne.
  
  

  
  


• 
  

  Strong understanding of network security, firewalls, IDS/IPS, VPNs, and endpoint security.
  
  

  
  


• 
  

  Experience in security incident handling, malware analysis, and threat investigation.
  
  

  
  


• 
  

  Familiarity with the MITRE ATT&CK framework and cyber kill chain.
  
  

  
  


• 
  

  Understanding of TCP/IP, DNS, HTTP/HTTPS, and network protocols.
  
  

  
  


• 
  

  Knowledge of vulnerability assessment and management tools such as Nessus, Qualys, or Rapid7.
  
  

  
  


• 
  

  Experience with threat intelligence platforms and security automation tools.
  
  

  
  


• 
  

  Strong analytical, troubleshooting, communication, and leadership skills.