SOC Lead (Security Operations Center)

📋 Description

• 24/7 operational oversight and escalation for monitoring and incidents.
• Lead multi-cloud investigations across endpoints, network, email, identity (AWS/Azure/GCP).
• Architect AI-driven SOC roadmap; build autonomous agents and SOAR playbooks.
• Lead SOC projects to optimize EDR, Email Gateways, and proactive threat hunting.
• Serve as technical Incident Commander during major security events.
• Mentor SOC analysts; create learning programs and tabletop exercises.

🎯 Requirements

• 8+ years in Information Security; 3+ years in a senior SOC role.
• Experience building 24/7 monitoring and on-call structures.
• Mastery of EDR/XDR, Email Gateways, and Digital Forensics tools.
• Cloud forensics across AWS, Azure, and GCP; CNAPP experience.
• Python/Bash scripting for APIs and automation.
• AI-augmented ops with LLMs (Claude, Gemini, Codex) and incident leadership.