Description

You will drive the strategic direction of the CSOC and lead high-level response efforts for complex security incidents.

Responsibilities

• Define and refine CSOC strategy to address emerging threats and drive SOC maturity through automation and advanced analytics.
• Serve as the highest escalation point for complex incidents, including nation-state APTs, ransomware, and insider threats.
• Conduct proactive threat hunting and deep forensic investigations into network, malware, and cloud-based intrusions.
• Develop custom SIEM detection logic, EDR rules, and network security signatures to improve visibility.
• Lead security automation (SOAR) initiatives and develop automated response workflows and playbooks.
• Mentor and coach L1-L3 analysts while designing advanced training programs and tabletop exercises.

Required Skills

• 10+ years of hands-on cybersecurity experience with deep expertise in SOC operations and incident response.
• Expert-level proficiency in digital forensics, memory analysis, network forensics, and endpoint telemetry.
• Proven experience leading investigations into APTs and enterprise-wide security incidents.
• Hands-on experience with industry-leading SIEM, EDR, IDS/IPS, and forensic tools.
• Proficiency in YARA rule development, Sigma rules, and custom detection engineering.
• Deep understanding of MITRE ATT&CK, Cyber Kill Chain, and adversary TTPs.
• Experience with threat intelligence correlation and mapping adversary tracking to established frameworks.
• Bachelor's or Master's degree in Cybersecurity, Computer Science, or a related field.
• Technical proficiency with CISSP, GCIH, GNFA, OSCP, CCTHP, CTIA, CISM, AWS, Azure, or GCP.

Key Skills

Education

Bachelor's or Master's degrees