Senior SOC Team Lead

The Senior Security Operations Center (SOC) Team Lead is responsible for leading a 24 / 7 security operations team in detecting, responding to, and mitigating cybersecurity incidents. The role oversees all SOC functions from monitoring, incident response, and threat intelligence, to documentation and process improvement ensuring effective protection of the organizations information systems. This position also provides technical leadership, mentoring, and direction to SOC analysts (L1L3), ensuring adherence to procedures, continuous improvement of playbooks, and alignment with the organizations cybersecurity strategy. The role blends hands-on technical expertise with leadership and operational management, ensuring that both people and platforms perform at optimal levels

KEY RESPONSIBILITIES

A. 24 / 7 Incident Response

• Lead and coordinate incident response activities, ensuring rapid triage, containment, eradication, and recovery.
• Perform detailed root cause analysis and post-incident reviews.
• Assess incident severity, impact, and recommend appropriate mitigation actions.
• Optimize and maintain incident response playbooks and escalation procedures.

B. 24 / 7 Alerts Monitoring

C. Suspicious Email Analysis and Security Validations

D. Documentation, Reporting, and Other Technical Tasks

(e.g., MXDR, EDR, SIEM collectors).

E. Threat Intelligence and Threat Hunting

III. LEADERSHIP & TEAM MANAGEMENT

QUALIFICATIONS

Minimum 7-10 years in cybersecurity operations, with at least 3 years in a SOC leadership or senior analyst role.

Strong understanding of SIEM, SOAR, EDR, NDR, Firewalls, IDS / IPS, and threat intelligence platforms.

CISSP, CISM, GCIH, GCIA, GCFA, CEH, or equivalent.