SOC Lead

SOC Responsibilities:

• Responsible for responding to security incidents identified by internal controls or external SOC partners
• Strictly adhere to service level agreements (SLAs), metrics and business scorecard obligations for ticket handling of security incidents and events.
• Proficient in Incident Response and automation workflows as it relates to Security Operations
• Detects, identifies, and responds to cyber events, and incidents in line with cyber security policies and procedures
• Should be capable to, independently and with minimal guidance from SOC Leadership, Lead and manage security event investigations, partnering with other departments as needed
• Coordinate and appropriately escalate as per protocols during incident response efforts, assists with classifying security events, direct and guide remediation, support documentation as needed
• Responsible for working as an Incident responder and align with Team in documenting the incident life cycle, conducting handoffs, escalation, and providing support during cyber incident investigations.
• Proficient in Threat Research and understands the latest malware trends, common attack TTPs, and the general threat landscape
• Provide reactive threat hunting to detect incidents, tune rules and thresholds to improve fidelity of alerts
• Train, mentor and motivate junior team members
• Create SOP's for newly created use cases.

Documentation and Reporting:

• Evaluate and update current SOC procedures and runbooks update as required or directed
• Providing daily handover / shift details
• Ensure timely delivery of Daily / Weekly / Monthly reporting as per requirements of Management

Experience Range:

6 to 8 years

Technical Skills:

Splunk, Crowdstrike, MS Defender, Cortex XSOAR, Proofpoint.