Your role, your impact
As a Security Operations Center (SOC) Team Lead, you’ll play a key role in protecting the organization against evolving cyber threats. Reporting to the Chief Information Security Officer, you’ll lead day-to-day security monitoring and incident response activities, provide insights to security leadership, and contribute to reducing risk and strengthening the organization's overall cyber defense posture.
Your day-to-day
- Lead and mentor SOC analysts, providing technical guidance, coaching, and workload coordination;
- Oversee real-time monitoring of security alerts from SIEM, EDR, and related security technologies;
- Investigate security incidents using established playbooks and act as the primary escalation point for complex incidents;
- Ensure accurate documentation of investigations and incident reports;
- Drive continuous tuning and optimization of SIEM rules, detection logic, and alerting workflows;
- Maintain SOC dashboards, metrics, and KPIs, reporting trends and risks to make recommendations to leadership;
- Support incident response exercises and SOC training activities;
- Contribute to the improvement of SOC processes, runbooks, and standard operating procedures;
- Collaborate with IT and cloud teams to ensure security monitoring and logging are integrated into new systems and services.
Keys to your success
- 7 to 10 years of experience in cybersecurity, security operations, or security engineering roles;
- Strong hands-on experience in SOC operations, threat detection, and incident response;
- Solid understanding of attacker tactics, techniques, and procedures, aligned with MITRE ATT&CK;
- Expertise in security tools including SIEM, EDR, SOAR, log analysis, and network security technologies;
- Demonstrated leadership experience, including team leadership, shift lead, coaching, or mentoring responsibilities;
- Ability to analyze complex security events and communicate findings clearly to technical and non-technical stakeholders;
- Strong problem-solving skills and sound judgement to handle high-severity incidents;
- Strong understanding of cybersecurity fundamentals, ISO 27001 controls framework, and common threat vectors.
Extra edge
- Experience securing cloud environments such as AWS and/or Azure;
- Relevant security certifications such as Security+, GCIH, GCIA, or CISSP;
- Experience contributing to SOC maturity initiatives, automation, or detection engineering improvements.
Language skills
