SOC Analyst L3 - Supervisor (m/f/d)

About the Company

Bruker is a global leader in scientific instrumentation and solutions, empowering innovation across life sciences, healthcare, and advanced materials. With a commitment to excellence and cutting-edge technology, we deliver precision tools that enable breakthroughs in research and industry. Our cybersecurity team plays a critical role in safeguarding Bruker’s digital ecosystem, ensuring resilience against evolving threats and protecting the integrity of our global operations.

For more information, please visit www.bruker.com

About the role

The Security Operations Center (SOC) Supervisor is responsible for leading and managing the daily operations of Bruker’s SOC located in Dubai. Reporting to the Global Information Security Operations Manager, this role is pivotal in ensuring effective incident management, strict compliance with established security standards, and alignment with Bruker’s overarching global security strategy. The SOC Supervisor serves as the local on-site primary escalation contact for critical security incidents and is committed to driving continuous improvement initiatives within the SOC.

Operational Leadership:

• Supervise SOC operations across all shifts to ensure comprehensive 24×7 coverage. Responsible for validating workflows related to incident triage, investigation, and response, guaranteeing operational consistency and efficiency.

Incident & Escalation Management:

• Act as the primary escalation point for high-severity security incidents, coordinating effectively between SOC L1/L2 team and Bruker InfoSec operations team to resolve issues swiftly and effectively.

Governance & Compliance:

• Ensure that all SOC activities adhere to service level agreements (SLAs) and regulatory standards such as ISO 27001, SOC 2, and CERT-In. Maintain alignment with Bruker’s security policies and frameworks to uphold governance and compliance requirements.

Stakeholder Communication:

• Provide timely and accurate incident reports and SOC performance metrics to leadership. Facilitate regular status updates and governance meetings to keep stakeholders informed and engaged.

Continuous Improvement:

• Collaborate with team members on SIEM tuning and rule optimization. Support automation initiatives, including Security Orchestration, Automation, and Response (SOAR) enhancements, and contribute to dashboard improvements for better operational visibility.

Required Skills & Qualifications

• Bachelor’s degree in computer science, Information Security, or a related field.
• Minimum of 5-7 years’ experience in SOC operations, with at least 3 years in a supervisory capacity.
• Strong proficiency in Microsoft Defender XDR and Microsoft Sentinel.
• Expertise in incident response, threat intelligence, and SOC governance practices.
• Familiarity with compliance frameworks such as ISO 27001 and GDPR.
• Excellent communication and stakeholder management abilities.

Preferred Certifications

• CISSP, CISM, or GIAC certifications.
• Microsoft Security certifications, such as SC-100.

Key Performance Indicators (KPIs)

• Adherence to SLAs for incident response.
• Reduction in Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR).
• Success rate in compliance audits.
• Delivery of SOC process improvement initiatives.