Team Lead, Security Operations Center (SOC)

Your role, your impact

As a Security Operations Center (SOC) Team Lead, you’ll play a key role in protecting the organization against evolving cyber threats. Reporting to the Chief Information Security Officer, you’ll lead day-to-day security monitoring and incident response activities, provide insights to security leadership, and contribute to reducing risk and strengthening the organization's overall cyber defense posture.

Your day-to-day

• Lead and mentor SOC analysts, providing technical guidance, coaching, and workload coordination;
• Oversee real-time monitoring of security alerts from SIEM, EDR, and related security technologies;
• Investigate security incidents using established playbooks and act as the primary escalation point for complex incidents;
• Ensure accurate documentation of investigations and incident reports;
• Drive continuous tuning and optimization of SIEM rules, detection logic, and alerting workflows;
• Maintain SOC dashboards, metrics, and KPIs, reporting trends and risks to make recommendations to leadership;
• Support incident response exercises and ongoing SOC training activities;
• Contribute to the improvement of SOC processes, runbooks, and standard operating procedures;
• Collaborate with IT and cloud teams to ensure security monitoring and logging are integrated into new systems and services.

Keys to your success

• 7 to 10 years of experience in cybersecurity, security operations, or security engineering roles;
• Strong hands-on experience in SOC operations, threat detection, and incident response;
• Solid understanding of attacker tactics, techniques, and procedures, aligned with MITRE ATT&CK;
• Expertise in security tools including SIEM, EDR, SOAR, log analysis, and network security technologies;
• Demonstrated leadership experience, including team leadership, shift lead, coaching, or mentoring responsibilities;
• Ability to analyze complex security events and communicate findings clearly to technical and non-technical stakeholders;
• Strong problem-solving skills and sound judgement to handle high-severity incidents;
• Strong understanding of cybersecurity fundamentals, ISO 27001 controls framework, and common threat vectors.

Extra edge

• Experience securing cloud environments such as AWS and/or Azure;
• Relevant security certifications such as Security+, GCIH, GCIA, or CISSP;
• Experience contributing to SOC maturity initiatives, automation, or detection engineering improvements.

Language skills

• English: Proficient