Requirements
The ideal candidate will possess a Bachelor's degree in a relevant field and at least 8 years of cybersecurity experience, with a minimum of 3 years in a SOC leadership or management role. Essential experience includes Security Operations, Incident Response, Threat Detection, Security Monitoring, and hands-on use of SIEM, SOAR, EDR/XDR, and Threat Intelligence platforms. Strong stakeholder management, communication, and leadership skills are crucial for managing high-severity incidents and crisis situations.
Description
SOC Operations LeadershipLead and oversee 24x7 Security Operations Center (SOC) activities, ensuring continuous monitoring, threat detection, investigation, and incident response.Serve as the primary escalation point for major security incidents and drive timely resolution.Ensure adherence to incident response procedures, runbooks, and escalation protocols.Lead operational decision-making during critical incidents and cyber crisis situations.Monitor SOC performance against defined KPIs and SLAs, driving continuous service improvement.Stakeholder & Client ManagementAct as the primary interface between SOC teams, clients, and internal leadership.Provide timely and effective communication during security incidents and operational engagements.Align SOC services with business risk priorities, compliance requirements, and client expectations.Support crisis management, incident reporting, and executive-level escalations.Team Leadership & GovernanceLead, coach, and develop SOC analysts and team leads.Manage team performance, workforce planning, and capability development initiatives.Foster a culture of accountability, collaboration, and operational excellence.Ensure compliance with organizational security policies, standards, and regulatory requirements.Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.8+ years of cybersecurity experience, including at least 3 years in a SOC leadership or management role.Strong experience in Security Operations, Incident Response, Threat Detection, and Security Monitoring.Hands-on experience with SIEM, SOAR, EDR/XDR, and Threat Intelligence platforms.Proven ability to manage high-severity security incidents and crisis situations.Strong stakeholder management, communication, and leadership skills.PreferredProfessional certifications such as CISSP, CISM, GCIH, GCIA, or equivalent.Experience with Microsoft Sentinel, Splunk, QRadar, or similar SIEM technologies.Knowledge of MITRE ATT&CK, NIST Cybersecurity Framework, ISO 27001, and industry best practices.Experience in Managed Security Services (MSSP) environments and cloud security operations.Strong analytical, problem-solving, and decision-making capabilities in fast-paced environments.