SOC Team Lead

What you'll do

• Manage the shift’s alert and case queue, quality reviews, escalations, and handoffs.
• Coordinate active incident response and client communications; coach and develop Tier 1 and Tier 2 analysts.
• Monitor service metrics, enforce SOC procedures, and improve detection tuning and AI-assisted triage.

What they ask for

• 5–8 years of security operations or incident response experience, including demonstrated Tier 2 / senior analyst experience.
• Hands-on experience across SIEM, EDR / XDR, SOAR, and related security technologies.
• Deep knowledge of SOC operations, detection and response workflows, incident management, operating systems, networking, attacker tactics, and MITRE ATT&CK.
• Availability for shift-based work, including nights, weekends, or holidays and on-call rotation as required.

Nice to have

• Prior experience as a shift lead, team lead, or in mentorship / quality review.
• One or more listed certifications: GIAC (GCIH, GCIA, GCFA), CompTIA CySA+, CISSP, CISM, Microsoft SC-200, or Palo Alto Networks (XSIAM / Cortex) certifications.

Pay

USD 110,000–140,000 per year; OTE (includes base salary and any applicable target bonus)

Tools

Elastic Security, Palo Alto Cortex XSIAM, SIEM, EDR / XDR, SOAR, MITRE ATT&CK

AI focus

Oversees human validation, tuning, and client-context enrichment of AI-driven agentic triage and suppression; requires familiarity with safe, auditable human-in-the-loop AI operations. The role also leads an AI-enabled transformation.