SOC Lead (Blue Team)

Job Description

• Lead and manage day-to-day Security Operations Center (SOC) activities.

• Oversee security monitoring, threat detection, incident investigation, and response processes.

• Manage and optimize security technologies, including SIEM, SOAR, EDR/XDR, IDS/IPS, and Firewall solutions.

• Lead threat hunting, digital forensic investigations, and root cause analysis for security incidents.

• Develop and maintain SOC playbooks, runbooks, detection use cases, and response procedures.

• Manage incident triage, prioritization, escalation, and remediation activities.

• Establish and improve security policies, operational procedures, and risk mitigation strategies.

• Monitor SOC performance through KPIs, SLAs, and continuous improvement initiatives.

Qualifications

• Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, or a related field.

• Minimum 3 years of experience in Cybersecurity or Security Operations.

• Strong hands-on experience with SIEM, SOAR, EDR/XDR, Threat Intelligence, and Incident Response platforms.

• Proven experience in threat hunting, digital forensics, malware analysis, and security investigations.

• Strong understanding of cybersecurity frameworks and standards such as MITRE ATT&CK, NIST CSF, ISO 27001, and Zero Trust Architecture.

• Experience managing security incidents, risk assessments, and cross-functional response teams.

• Strong leadership, analytical, problem-solving, and decision-making skills.

• Relevant certifications such as CISSP, GCIH, GCIA, SC-200, CEH, or equivalent are preferred.