Global SOC Lead: 24/7 Incident Response & Strategy

UBQ.io; Spain; Remote; EUR 90,000 - 130,000; Full time

Job summary

UBQ.io is seeking an experienced SOC Lead to run our global follow-the-sun Security Operations Center. You will lead a distributed team of SOC Analysts, manage scheduling across time zones, and own incident response processes to deliver rapid, high-quality investigations.

You will triage, investigate, and hunt threats across SIEM, EDR, SSE, and WAF platforms, while driving improvements to detection content and governance. Excellent English communication is essential for remote collaboration.

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent practical experience).
• At least 5 years of hands-on Security Operations experience, including at least 1 year as a SOC Lead or similar lead role.
• Proven experience triaging alerts, investigating incidents, and leading major incident responses in production.
• Solid knowledge of EDR, SSE, SIEM, and WAF technologies and how to use them to investigate threats.
• Experience leading or working in a 24/7 follow-the-sun SOC with distributed teams across time zones.
• Strong incident response and threat hunting capabilities, familiarity with MITRE ATT&CK.
• Excellent written and verbal English communication, stakeholder reporting.

Responsibilities

• Lead and coach a distributed SOC Analysts team across regions.
• Own the SOC schedule and rotations, including weekend coverage.
• Define and enforce the shift handover process for continuous investigations.
• Act as escalation point and incident lead for major security incidents.
• Triage, investigate, and hunt threats across SIEM, EDR, SSE, and WAF.
• Review investigation quality and improve documentation and standards.
• Define, track, and report SOC KPIs (alerts, MTTD, MTTR, false positives).
• Improve detection content with engineering and tune SIEM/EDR/WAF rules.
• Develop and maintain runbooks, playbooks, and escalation matrices.
• Support hiring, onboarding, and training of SOC analysts.
• Collaborate with IT, infra, app, and security engineering to resolve incidents.
• Contribute to vulnerability management and overall security posture.

Skills

SOC leadership

Incident response

Threat hunting

Team management

Security incident handling

English communication

Education

Bachelor's degree in IT/Cybersecurity/CS

Tools

SIEM

EDR

SSE

WAF

Job description

UBQ.io is seeking an experienced SOC Lead to run our global follow-the-sun Security Operations Center. You will lead a distributed team of SOC Analysts, manage scheduling across time zones, and own incident response processes to deliver rapid, high-quality investigations.

You will triage, investigate, and hunt threats across SIEM, EDR, SSE, and WAF platforms, while driving improvements to detection content and governance. Excellent English communication is essential for remote collaboration.