Security Operations lead

The Security Operations will lead and manage the Security Operations Center (SOC), ensuring effective monitoring, detection, response, and mitigation of cybersecurity threats. This role is responsible for overseeing incident response, threat intelligence integration, and continuous improvement of security operations processes and technologies.

Key Responsibilities:

Lead day-to-day operations of the SOC, including managing analysts and incident responders.
Develop and maintain security monitoring, and incident response procedures.
Oversee threat detection, analysis, and response activities.
Coordinate with internal teams and external partners during security incidents.

Implement and optimize SIEM, SOAR, and other security tools.
Conduct regular threat hunting and vulnerability assessments.
Ensure timely reporting and escalation of security incidents.
Maintain and improve threat intelligence integration and enrichment workflows.
Monitor KPIs and metrics to assess SOC performance and maturity.
Support compliance with relevant regulations (e.g., ISO 27001, NIST, GDPR).
Provide leadership in crisis situations and post-incident reviews.

Qualifications:

Bachelor's degree in Computer Science, Information Security, or related field.
10+ years of experience in cybersecurity, with at least 2 years in a leadership role.
Strong understanding of SOC operations , incident response, and threat intelligence.
Hands-on experience with SIEM, SOAR, EDR, and other security technologies.
Knowledge o f MITRE ATT&CK, cyber kill chain, and threat actor TTPs.
Relevant certifications (e.g., CISSP, CISM, GCIA, GCIH) preferred.
Excellent communication, leadership, and analytical skills.

Skills  Experience in cloud security (AWS, Azure, GCP).
Familiarity with regulatory frameworks and audit processes.
Ability to mentor and develop junior security staff.
Strong problem-solving and decision-making capabilities under pressure