Description

Lead day-to-day Security Operations Center (SOC) activities, ensuring effective detection, investigation, and response to cybersecurity threats.

This role is remote.

Responsibilities

• Oversee incident response by validating security events and directing action plans based on severity levels.
• Mentor and coach L1 and L2 SOC analysts to support professional growth and knowledge sharing.
• Develop and refine incident response playbooks, procedures, and detection rules.
• Perform root cause analysis and conduct proactive threat-hunting activities.
• Collaborate with SOC engineers and Threat Intelligence teams to enhance automation via SOAR and improve detection capabilities.

Required Skills

• 5+ years of experience in a SOC or related cybersecurity role.
• Proven leadership experience mentoring SOC analysts.
• Hands-on experience with SIEM platforms (Sentinel, QRadar) and EDR tools (CrowdStrike, Defender).
• Proficiency in scripting with Python and PowerShell.
• Strong knowledge of incident response frameworks including NIST and MITRE ATT&CK.
• Familiarity with cloud security environments including AWS, Azure, and GCP.
• Strong analytical, problem-solving, and communication skills.

Preferred Skills

• Relevant certifications such as CISSP, GCIA, GCIH, or CEH.

Key Skills

Education

Any Graduate