Oversee the day-to-day operations of the Security Operations Center (SOC), ensuring efficient and effective incident detection, response, and investigation.
Lead and manage the SOC team, providing guidance, mentorship, and performance feedback.
Develop and implement SOC policies, procedures, and processes aligned with industry best practices.
Manage security incidents, coordinating response efforts across various teams.
Collaborate with other security functions (threat intelligence, vulnerability management, etc.) to enhance overall security posture.
Monitor and report on SOC performance metrics and KPIs.
Drive continuous improvement initiatives within the SOC.
Required Qualifications:
Bachelor's degree in Cybersecurity, Information Technology, or related fields.
8 - 12 years in security operations, threat management of cybersecurity, with management experience.
Broad understanding of various security domains (incident response, threat intelligence, vulnerability management, etc.)
Experience with security operations frameworks and best practices
Familiarity with security metrics and reporting
Proven leadership and management experience in a SOC environment.
Deep understanding of incident response methodologies and best practices.
Strong knowledge of security technologies and tools (SIEM, SOAR, EDR, etc.).
Excellent communication, coaching, collaboration, and problem-solving skills.
Ability to work under pressure and make critical decisions during security incidents.