SOC Lead: Incident Response & Team Leadership

Inchcape Digital Limited; Bogotá ciudad; On-site; COP 144,000,000 - 168,000,000; Full time

Job summary

Inchcape Digital is seeking a SOC Lead to head the global Security Operations Center, combining hands-on investigations with people leadership. You will guide analysts through complex incidents, drive improvements to playbooks and runbooks, and ensure timely, accurate reporting of security events.

The role demands deep experience across SIEM, EDR, SOAR and cloud security, plus proven ability to manage on-call escalations and develop a high-performing SOC team within a dynamic automotive

Qualifications

• Hands-on investigation of complex security alerts in L2/L3 role.
• Strong knowledge of SIEM, EDR, SOAR, and cloud security.
• Ability to lead shifts and manage escalations.
• Experience with Windows, Linux, Active Directory, networking and cloud technologies.

Responsibilities

• Lead SOC shifts and provide day-to-day operational direction to L1 and L2 SOC Analysts, ensuring alerts, incidents, investigations, handovers and escalations are managed effectively and in line with established SOC procedures.
• Act as the primary technical escalation point for complex security alerts and incidents, applying advanced investigative skills across SIEM, EDR, email security, identity, cloud, endpoint and security monitoring technologies.
• Review and quality-assure analyst investigations, case notes, evidence collection, timelines and incident records, ensuring accuracy, consistency, excellent attention to detail and appropriate escalation of security incidents.
• Coach, mentor and develop SOC Analysts, conducting regular one-to-one meetings, providing constructive feedback, supporting career development and fostering a culture of continuous learning and operational excellence.
• Work closely with the Head of SOC to deliver operational objectives and continuous improvement initiatives, enhancing SOC processes, playbooks, runbooks, detection capabilities, reporting, knowledge management and overall service effectiveness.

Skills

SOC leadership

SIEM

EDR

SOAR

Email security

Identity & access

Cloud security

Endpoint security

Active Directory

Windows/Linux

Networking

Threat intel

Tools

Ticketing platforms

Job description

Inchcape Digital is seeking a SOC Lead to head the global Security Operations Center, combining hands-on investigations with people leadership. You will guide analysts through complex incidents, drive improvements to playbooks and runbooks, and ensure timely, accurate reporting of security events.

The role demands deep experience across SIEM, EDR, SOAR and cloud security, plus proven ability to manage on-call escalations and develop a high-performing SOC team within a dynamic automotive