SOC Lead

Inchcape Digital; Colombia; Presencial; COP 120.000.000 - 220.000.000; Jornada completa

Descripción de la vacante

Inchcape Digital in Colombia is seeking a SOC Lead to drive performance of the Global SOC. You will lead shifts, coordinate investigations across SIEM, EDR, and cloud services, and escalate complex alerts.

You will mentor analysts and help improve playbooks, runbooks, and detection capabilities, ensuring high-quality incident response. You will work closely with the Head of SOC to deliver operational objectives, manage risk, and maintain an effective security operations service for a major

Formación

• Strong SOC operations experience, including hands-on investigation of complex security alerts and incidents in a Level 2 or 3 capacity.

Responsabilidades

• Lead SOC shifts and provide day-to-day operational direction to L1 and L2 SOC Analysts, ensuring alerts and incidents are managed effectively.
• Act as the primary technical escalation point for complex security alerts and incidents across SIEM, EDR, email security, identity, cloud and monitoring technologies.
• Review investigations, evidence collection, timelines and incident records to ensure accuracy and escalation where needed.
• Manage incident escalations, prioritising by risk and business impact with timely updates to stakeholders.
• Provide technical leadership during on-call and coach SOC Analysts for career development.
• Collaborate with Head of SOC to improve processes, playbooks, and detection capabilities.

Conocimientos

SOC operations

Incident response

SIEM

EDR

SOAR

Cloud security

Identity

Active Directory

Windows/Linux

Herramientas

SIEM platforms

EDR

SOAR

Cloud security tools

Identity platforms

Ticketing systems

Descripción del empleo

Do you want to lead in a dynamic business that’s transforming global automotive distribution? At Inchcape, we’re pursuing an exciting strategy to evolve our global business and accelerate our industry towards a low-carbon, sustainable future.

Join Inchcape Digital, part of Inchcape global network. You’ll explore and develop cutting-edge technology and data solutions that are driving our innovation and unique market position. Thrive as part of a highly collaborative and supportive team of diverse and talented colleagues.

Our Security platform is seeking a SOC Lead to join our team. The SOC Lead is a hands-on cybersecurity leader responsible for driving the performance of Inchcape’s Global SOC. This role combines technical leadership, incident response expertise and people management, leading analysts through complex investigations, developing team capabilities, and ensuring the delivery of a world-class security operations service.

What you’ll do

• Lead SOC shifts and provide day-to-day operational direction to L1 and L2 SOC Analysts, ensuring alerts, incidents, investigations, handovers and escalations are managed effectively and in line with established SOC procedures.
• Act as the primary technical escalation point for complex security alerts and incidents, applying advanced investigative skills across SIEM, EDR, email security, identity, cloud, endpoint and security monitoring technologies.
• Leverage strong IT infrastructure knowledge, including operating systems, networking, Active Directory, cloud services, endpoint technologies and enterprise environments, to support investigations, identify root causes and drive effective incident resolution.
• Review and quality-assure analyst investigations, case notes, evidence collection, timelines and incident records, ensuring accuracy, consistency, excellent attention to detail and appropriate escalation of security incidents.
• Manage incident and operational escalations, prioritising activity based on risk, threat severity and business impact, while providing timely updates to the Head of SOC and relevant stakeholders
• Act as an escalation point for analysts participating in the on-call rota, providing technical leadership, guidance and decision-making.
• Coach, mentor and develop SOC Analysts, conducting regular one-to-one meetings, providing constructive feedback, supporting career development and fostering a culture of continuous learning and operational excellence.
• Work closely with the Head of SOC to deliver operational objectives and continuous improvement initiatives, enhancing SOC processes, playbooks, runbooks, detection capabilities, reporting, knowledge management and overall service effectiveness.

About you

• Strong SOC operations experience, including hands-on investigation of complex security alerts and incidents in a Level 2 or Level 3 analyst capacity
• Deep technical knowledge of SIEM, EDR, SOAR, email security, identity, cloud, endpoint and ticketing platforms, supported by broad experience across enterprise IT environments, including Windows and Linux operating systems, Active Directory, networking, authentication and cloud technologies.
• Ability to lead shifts, prioritise work, manage escalations and make sound operational decisions under pressure.
• Strong understanding of common attack techniques, incident response processes, threat intelligence, malware analysis concepts, phishing investigations and account compromise workflows.
• Ability to work with the Head of SOC to define quarterly goals, translate priorities into practical objectives, and support delivery through regular review and follow-up.
• Commitment to continuous improvement, operational discipline, excellent attention to detail, knowledge sharing, and maintaining a high-performing, resilient SOC service.

We offer you

At Inchcape, we’re shaping the future of mobility, and you’re invited to shape it with us. You’ll join a collaborative culture that values wellbeing, growth, and inclusion. Through impactful work, ongoing development, and global and local rewards, we create a workplace for people to succeed and fulfil your aspirations.

Opportunity for everyone

Inchcape is committed to creating an inclusive and diverse workplace where the power of our differences can be embraced and everyone feels they can belong, be themselves and succeed.

About us

Inchcape is the leading global automotive distributor operating in 38 markets. We partner with some of the biggest brands in the business to sustainably power better mobility today and in the future.

Our diverse global team of over 16,000 talented colleagues foster an inclusive and collaborative culture, delivering a brilliant experience for our customers and partners. We’re a dynamic and fast-growing business, driving the transformation of our industry and redefining tomorrow.

Inchcape Digital employs over 1,300 team members across Colombia and Philippines. Our portfolio includes vehicle distribution for world-renowned brands, market-leading fulfilment solutions, exceptional retail experiences, and tailored financial services.

Additional information request

Selected candidates will be contacted to initiate our hiring journey. We may request additional information from applicants to better understand your background, qualifications and experience for the role.