SOC Lead

SOC Responsibilities:

• Responsible for responding to security incidents
identified by internal controls or external SOC

partners

• Strictly adhere to service level agreements (SLAs),
metrics and business scorecard obligations

for ticket handling of security incidents and events.

• Proficient in Incident Response and automation workflows
as it relates to Security Operations

• Detects, identifies, and responds to cyber events, and
incidents in line with cyber security

policies and procedures

• Should be capable to, independently and with minimal
guidance from SOC Leadership, Lead and

manage security event investigations, partnering with other
departments as needed

• Coordinate and appropriately escalate as per protocols
during incident response efforts, assists

with classifying security events, direct and guide
remediation, support documentation as

needed

• Responsible for working as an Incident responder and align
with Team in documenting the

incident life cycle, conducting handoffs’, escalation, and
providing support during cyber incident

investigations.

• Proficient in Threat Research and understands the latest
malware trends, common attack TTPs,

and the general threat landscape

• Provide reactive threat hunting to detect incidents, tune
rules and thresholds to improve fidelity

of alerts

• Train, mentor and motivate junior team members

• Create
  SOP's for newly created use cases.
  

Documentation and Reporting:

• Evaluate and update current SOC procedures and runbooks
update as required or directed

• Providing daily handover / shift details

• Ensure timely delivery of Daily / Weekly / Monthly
reporting as per requirements of

Management

Experience Range : 6 to 8 years

Technical Skills: Splunk, Crowdstrike, MS Defender, Cortex
XSOAR, Proofpoint.