SOC Lead – Cyber Security Operations

About the role

The SOC Lead will monitor, prioritize, and analyze cyber security incidents across IT and OT environments, driving end‑to‑end response actions against critical threats such as malware, ransomware, unauthorized access, and data leaks.

Key responsibilities

• Lead incident response actions, ensuring containment and mitigation of cyber threats.
• Perform digital forensics on Windows/Linux systems and network devices, conduct root cause analysis and implement corrective actions.
• Utilize the MITRE ATT&CK framework to analyze adversary tactics and improve proactive defenses.
• Conduct threat‑hunting activities using system and network logs to uncover hidden threats.
• Design, update, and optimize correlation and detection rules on SIEM and EDR platforms.
• Create and maintain incident response playbooks and coordinate tabletop exercises with cross‑functional teams.
• Prepare technical analysis reports, incident assessments, and threat briefs for technical teams and senior management.
• Identify security gaps, propose remediation recommendations, and track implementation with infrastructure and application teams.

Required profile

• Bachelor’s degree in Computer Engineering, Electrical‑Electronics Engineering or related field.
• Minimum 7 years of experience in Cyber Security Operations, Incident Response, or Threat Hunting.
• Strong command of English, both written and verbal.

Required skills

• Deep knowledge of Windows and Linux operating system architectures.
• Digital forensics expertise on Windows/Linux and network devices.
• Network security fundamentals, TCP/IP protocols, and traffic analysis.
• Hands‑on experience with EDR, SIEM, SOAR, firewalls, IPS/IDS, sandbox, packet capture, and NDR solutions.
• Scripting proficiency in Python, PowerShell, or Bash for automation and response tooling.