SOC Lead

About the role

The SOC Lead is a senior member of the Security Operations Center (SOC) team, responsible for overseeing day-to-day operations, guiding SOC analysts, and ensuring effective detection, response, and mitigation of cyber threats. This role involves managing security incidents, optimizing Security Information and Event Management (SIEM) systems, and contributing to the strategic direction of the SOC.

What you'll do

• Threat Intelligence Utilization : Integrate and leverage threat intelligence feeds to enhance detection rules, correlation logic, and incident response strategies
• Process Improvement : Develop, refine, and implement SOC processes, playbooks, and standard operating procedures (SOPs) to ensure consistent and efficient operations
• Reporting and Metrics : Generate and review reports on incident trends, SIEM performance, and SOC metrics, presenting findings to the SOC Manager and other stakeholders
• Training and Development : Facilitate training sessions and knowledge-sharing initiatives to upskill team members and promote certifications

What you need

• 5–8 yrs of experience
• SIEM
• Incident response
• Network security
• Cloud security
• EDR
• Python
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CISSP
• CEH
• Firewalls
• PowerShell
• AWS
• GCP