Description

Lead incident response efforts as an L3 or SOC Lead, focusing on security automation and playbook design.

This role is on-site.

Responsibilities

• Design and implement SOC playbooks to standardize detection and containment procedures.
• Develop and maintain incident response workflows to streamline security operations.
• Automate incident handling processes using SOAR capabilities to reduce manual effort.
• Lead complex incident response efforts as the primary point of escalation.

Required Skills

• 6+ years of experience in SOC or incident response environments.
• Hands-on experience with Azure Sentinel and Microsoft Defender.
• Proficiency in SOAR implementation and automation workflows.
• Experience with Splunk or Security Onion/XSOAR.
• Strong background in designing and optimizing incident response playbooks.
• Experience managing security operations at an L3 or Lead level.

Preferred Skills

• Bachelor's degree or equivalent graduate-level education.

Key Skills

Education

ANY GRADUATE