SOC LEAD

Inchcape; Bogotá; Hybrid; COP 120,000,000 - 180,000,000; Full time

Job summary

Inchcape is seeking a SOC Lead to drive performance of the Global SOC. This hands-on security leadership role combines incident response, technical ownership, and people management to deliver world-class security operations.

The role requires leading shifts, guiding analysts, and coordinating with the Head of SOC on objectives and improvements across playbooks, detections, and reporting. Hybrid work in Bogota supports collaboration and effective incident handling.

Qualifications

• Hands-on leadership of a Security Operations Center team.
• Experience investigating complex security alerts and incidents.
• Experience with SIEM, EDR, SOAR, and cloud security tooling.

Responsibilities

• Lead SOC shifts and provide direction to L1/L2 Analysts.
• Escalate and investigate complex security events with technical depth.
• Mentor analysts and drive continuous improvement of SOC processes.

Skills

SOC leadership

Incident response

SIEM

EDR

Cloud security

Active Directory

Windows

Linux

Tools

SOAR

Ticketing systems

Job description

Select how often (in days) to receive an alert:

Doyouwanttoleadinadynamicbusinessthat'retransformingglobalautomotivedistribution?AtInchcape,we'repursuinganexcitingstrategytoevolveourglobalbusinessandaccelerateourindustrytowardsalow-carbon,sustainablefuture.

JoinInchcapeDigital,partofInchcapeglobalnetwork.You'llexploreanddevelopcutting-edgetechnologyanddatasolutionsthataredrivingourinnovationanduniquemarketposition.Thriveaspartofahighlycollaborativeandsupportiveteamofdiverseandtalentedcolleagues.

Our Security platform is seeking a SOC Lead to join our team. The SOC Lead is a hands-on cybersecurity leader responsible for driving the performance of Inchcape's Global SOC. This role combines technical leadership, incident response expertise and people management, leading analysts through complex investigations, developing team capabilities, and ensuring the delivery of a world-class security operations service.

Whatyou'lldo

• Lead SOC shifts and provide day-to-day operational direction to L1 and L2 SOC Analysts, ensuring alerts, incidents, investigations, handovers and escalations are managed effectively and in line with established SOC procedures.
• Act as the primary technical escalation point for complex security alerts and incidents, applying advanced investigative skills across SIEM, EDR, email security, identity, cloud, endpoint and security monitoring technologies.
• Leverage strong IT infrastructure knowledge, including operating systems, networking, Active Directory, cloud services, endpoint technologies and enterprise environments, to support investigations, identify root causes and drive effective incident resolution.
• Review and quality-assure analyst investigations, case notes, evidence collection, timelines and incident records, ensuring accuracy, consistency, excellent attention to detail and appropriate escalation of security incidents.
• Manage incident and operational escalations, prioritising activity based on risk, threat severity and business impact, while providing timely updates to the Head of SOC and relevant stakeholders
• Act as an escalation point for analysts participating in the on-call rota, providing technical leadership, guidance and decision-making.
• Coach, mentor and develop SOC Analysts, conducting regular one-to-one meetings, providing constructive feedback, supporting career development and fostering a culture of continuous learning and operational excellence.
• Work closely with the Head of SOC to deliver operational objectives and continuous improvement initiatives, enhancing SOC processes, playbooks, runbooks, detection capabilities, reporting, knowledge management and overall service effectiveness.

Aboutyou

• Strong SOC operations experience, including hands-on investigation of complex security alerts and incidents in a Level 2 or Level 3 analyst capacity
• Deep technical knowledge of SIEM, EDR, SOAR, email security, identity, cloud, endpoint and ticketing platforms, supported by broad experience across enterprise IT environments, including Windows and Linux operating systems, Active Directory, networking, authentication and cloud technologies.
• Ability to lead shifts, prioritise work, manage escalations and make sound operational decisions under pressure.
• Strong understanding of common attack techniques, incident response processes, threat intelligence, malware analysis concepts, phishing investigations and account compromise workflows.
• Ability to work with the Head of SOC to define quarterly goals, translate priorities into practicalobjectives, and support delivery through regular review and follow-up.
• Commitment to continuous improvement, operational discipline, excellent attention to detail, knowledge sharing, and maintaining a high-performing, resilient SOC service.

Weofferyou

AtInchcape,we'reshapingthefutureofmobility,andyou'reinvitedtoshapeitwithus.You'lljoinacollaborativeculturethatvalueswellbeing,growth,andinclusion.Throughimpactfulwork,ongoingdevelopment,andglobalandlocalrewards,wecreateaworkplaceforpeopletosucceedandfulfilyouraspirations.

Opportunityforeveryone

Inchcapeiscommittedtocreatinganinclusiveanddiverseworkplacewherethepowerofourdifferencescanbeembracedandeveryonefeelstheycanbelong,bethemselvesandsucceed.

Aboutus

Inchcapeistheleadingglobalautomotivedistributoroperatingin38markets.Wepartnerwithsomeofthebiggestbrandsinthebusinesstosustainablypowerbettermobilitytodayandinthefuture.

Ourdiverseglobalteamofover16,000talentedcolleaguesfosteraninclusiveandcollaborativeculture,deliveringabrilliantexperienceforourcustomersandpartners.We'redynamicandfast-growingbusiness,drivingthetransformationofourindustryandredefiningtomorrow.

Additionalinformationrequest

Selected candidates will be contacted to initiate our hiring journey. We may request additional information from applicants to better understand your background, qualifications and experience for the role.

Location: Colombia
Work Mode: Hybrid (Bogota)

For any technical support please email to [e-mail]