Security Operations Team Lead

At nu Harbor, we help organizations navigate an increasingly complex cybersecurity landscape with confidence. By combining expert guidance, innovative technology, and trusted partnerships, we make security stronger, more effective, and easier to understand. We’re looking for talented individuals who are passionate about solving meaningful challenges, helping clients succeed, and continuously improving alongside a team that values curiosity, collaboration, and impact.

The SOC Team Lead role serves as the technical leader for a dedicated team of Security Analysts and Security Engineers. They are accountable for ensuring Sec Ops team operates efficiently, mitigates threats in a timely manner, and matures organizational cyber defense programs. The SOC Team Lead leverages their highly technical expertise, leadership communication and decision‑making skills to enable the team and cross‑department collaboration.

• Lead by example working consistently with the nu Harbor values:
  Help Clients Win, Always Improve, Protect the House.
• Are responsible and accountable for analyzing security alerts, events, and trends to effectively communicate the value of NuHarbor services.
• Conduct investigations independently and provide actionable, context‑relevant escalations and recommendations to clients.
• Support the security analysts with ticket intake, disposition, and escalation within SLA requirements.
• Serve as the primary technical escalation point for complex or high‑severity security incidents. Guide the investigation and response efforts to ensure timely and effective remediation.
• Perform regular quality assurance checks on analysts’ work, including alert triage, investigation notes, and incident reports, to ensure accuracy, thoroughness, and adherence to established procedures.
• Contribute to the development, documentation, and refinement of SOC processes, standard operating procedures (SOPs).
• Train, mentor, and support security analysts and security engineers autonomously.
• Develop recommendations and enhancements to mature a client’s cybersecurity program as a trusted cross‑team liaison.
• Demonstrate a team‑first mindset and proactively support operations without direct leader assignment.
• Communicate effectively with leadership or key stakeholders regarding escalations or advanced threats that require incident response actions.
• Provide constructive, real‑time feedback to analysts and engineers on their technical work and help them develop their skills and career goals.
• Perform 1 on 1 meetings with security analysts and security engineers.

We’re looking for someone who brings these minimum qualifications:

• Bachelor’s Degree in a related field and five (5) or more years in Security Operations (Sec Ops).
  • In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.
• Experience executing initial triaging and response through Splunk.
• Demonstrated experience executing security event triaging and tuning.
• Demonstrated experience writing playbooks and support procedures.
• Demonstrated experience as a technical lead for security operations.
• Proven experience performing the following advanced techniques: incident response, threat hunting, malware analysis, detection creation, threat intelligence, and automation.
• Strong understanding of Incident Response phases and demonstrated experience responding to security incidents.
• Demonstrated experience with detection engineering and threat hunting through both a SIEM and EDR toolset.
• Demonstrated experience with managing and maintaining Endpoint Detection and Response (EDR) or Security Orchestration Automation and Response solutions.
  • Crowd Strike
  • S…