SOC Team Lead

Responsibilities

• Lead end‑to‑end investigation, containment, and remediation of high‑severity and complex security incidents, acting as the highest technical escalation point within the SOC.
• Own real‑time incident triage governance (queue health, escalation decisions, and handover quality) to ensure timely resolution and consistent execution of the agreed incident management process.
• Apply advanced threat intelligence, threat hunting, and trend analysis to proactively identify emerging threats and strengthen detection and response capabilities.
• Drive continuous SOC maturity through quality assurance of investigations, refinement of detection use cases, and improvement of playbooks, tooling, and response processes.
• Set investigation standards and provide authoritative technical direction to L1/L2 analysts during incidents and escalations to improve consistency and rigor of outcomes.
• Coach and develop SOC analysts through case reviews, technical mentoring, and knowledge sharing to strengthen team capability and reduce repeat errors.
• Manage and deliver complex client engagements, ensuring consistent service quality, timely outcomes, and measurable value realization.
• Engage directly with client stakeholders during escalations to communicate findings, root cause, impact, and remediation guidance in a clear and actionable manner.
• Prepare and deliver operational, incident, and trend‑based reports and governance inputs (including KPI/SLA performance and recurring issues) for client and internal stakeholders.