SOC Lead (Security Operations Center)

📋 Description

• Design, build, and optimize 24/7 monitoring and escalation.
• Lead investigations across endpoint, network, email, and identity in multi-cloud (AWS/Azure/GCP).
• Develop AI-driven agents and optimize SOAR playbooks to reduce response times.
• Lead SOC initiatives to optimize EDR, Email Gateways, and threat hunting.
• Act as technical Incident Commander during critical security events; coordinate response lifecycle.
• Mentor SOC analysts; establish learning programs and tabletop exercises.

🎯 Requirements

• 8+ years in Information Security; 3+ years in senior/lead SOC/IR.
• Proven experience building/managing 24/7 monitoring and on-call rotations.
• Deep mastery of EDR/XDR, Email Gateways, and Digital Forensics.
• Strong Cloud Forensics in AWS, Azure, and GCP; CNAPP experience.
• Programming/scripting: Python, Bash for API integrations and automation.
• Experience with AI-augmented workflows using LLMs (Claude/Gemini/Codex).
• Exceptional leadership with mentoring and handling high-stress incidents.
• Willing to be paged outside business hours.