Security Operations Lead

8 years of cybersecurity experience, with 3+ years leading SOC or IR teams.

Hands-on experience triaging alerts, logs, events, and incident artifacts across enterprise environments.

Strong experience with one or more of the following technologies: SIEM (Splunk.

Elastic etic), NDR (ExtraHop), EDR/XDR (Trellix), and packet analysis tools.

Demonstrated ability to lead incident response for high-severity cybersecurity events.

Advanced experience in threat hunting, analytics, and adversary behavior profiling.

The Security Operations Lead will oversee all SOC functions and lead a blended team of SOC Analysts and Security Engineers to ensure rapid detection, investigation, and response to security threats.

This role is responsible for driving threat hunting, leading major incidents, engineering detection capabilities, and maturing SOC operations to stay ahead of evolving adversary behaviors.

The Lead acts as the central coordination point during security events and sets the strategic direction for the SOC to ensure continuous, mission-critical security coverage.