Global Security Operations Lead: Detection & Incident Response

Vitol; Genf; On-site; CHF 140,000 - 190,000; Full time

Job summary

Vitol seeks an experienced Security Operations Lead to build and lead a global SOC, based in Geneva or London. You will drive detection engineering, incident response, and playbook development across multiple offices, overseeing a distributed team and aligning with executives.

You will mentor analysts, implement MITRE ATT&CK-aligned detections, and coordinate with IT and Legal to improve security posture. Geneva-based or international travel to support teams may be required.

Qualifications

• 4+ years in cybersecurity operations or security engineering.
• Experience leading a SOC team across remote/distributed personnel.
• Strong knowledge of MITRE ATT&CK, NIST CSF and incident handling.
• French language skills are advantageous for Geneva-based roles.

Responsibilities

• Lead a 4-person SOC across Singapore, London, and Houston ensuring 24/7 coverage and quality.
• Define SOC procedures, escalation paths, handover protocols, and metrics (MTTD, MTTR).
• Oversee detection engineering lifecycle and analytics rule development (KQL).
• Coordinate incident response across IT, Legal, Compliance, and business units.
• Write and maintain playbooks; drive tabletop exercises and purple-team activities.
• Mentor team members and foster continuous improvement across time zones.

Skills

SOC Leadership

Incident Response

Threat Hunting

L2/L3 Incident Handling

KQL / SIEM Analytics

Cloud Security

Stakeholder Management

Education

Bachelor's in CS/Security

Tools

Microsoft Sentinel

Microsoft Defender for Endpoint

CrowdStrike Falcon

Azure Defender / Cloud Security

Zscaler / Palo Alto

Job description

Vitol seeks an experienced Security Operations Lead to build and lead a global SOC, based in Geneva or London. You will drive detection engineering, incident response, and playbook development across multiple offices, overseeing a distributed team and aligning with executives.

You will mentor analysts, implement MITRE ATT&CK-aligned detections, and coordinate with IT and Legal to improve security posture. Geneva-based or international travel to support teams may be required.