SOC Supervisor

HugoBank; Karachi Division; On-site; PKR 3,000,000 - 6,000,000; Full time

Job summary

HugoBank is seeking a SOC Supervisor to lead the Security Operations Center analysts responsible for continuous monitoring of the bank’s digital infrastructure, including core banking apps, cloud services, and payment platforms.

You will oversee threat detection, incident response, documentation, playbook development, and escalation to the Deputy CISO, ensuring 24/7 coverage and ongoing improvements to detection capabilities.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or Information Technology.
• 5–8 years of experience in cybersecurity operations.
• Minimum 2–3 years of experience working in a SOC environment.
• Hands‑on experience with SIEM, EDR/XDR, threat monitoring, and incident response tools.
• Experience in banking, fintech, or financial services environments preferred.

Responsibilities

• Supervise SOC analysts responsible for monitoring security alerts and telemetry.
• Ensure continuous 24/7 monitoring of SIEM alerts and security monitoring platforms.
• Manage alert triage processes, investigation workflows, and escalation procedures.
• Analyze security alerts from SIEM, EDR/XDR, network security tools, and cloud monitoring.
• Lead initial investigation and containment of cybersecurity incidents.
• Escalate high-severity incidents to the Deputy CISO and incident response team.
• Maintain incident documentation, investigation records, and root-cause analysis reports.
• Develop and maintain SOC playbooks for phishing, malware, account compromise, insider threats, and DDoS attacks.
• Utilize threat intelligence feeds to improve detection capabilities.
• Update SIEM rules and alert thresholds to reduce false positives.
• Ensure monitoring coverage across core banking, digital banking, payments, cloud, network devices, and endpoints.
• Prepare SOC operational reports: incidents, trends, false positives, response times.
• Support continuous improvement of SOC operations and threat detection processes.

Skills

SOC leadership

Threat detection

Incident response

Alert triage

Escalation

Education

Bachelor’s degree in Computer Science, Cybersecurity, or Information Technology

Tools

SIEM

EDR/XDR

Threat intelligence feeds

Job description

The SOC Supervisor is responsible for supervising the Security Operations Center (SOC) analysts and ensuring continuous monitoring of security events across the Bank’s digital banking infrastructure. The role involves overseeing threat detection, alert triage, incident investigation, and escalation processes to ensure timely response to cybersecurity threats affecting banking systems, cloud infrastructure, and payment platforms.

• Supervise SOC analysts responsible for monitoring security alerts and security telemetry.
  
• Ensure continuous 24/7 monitoring of SIEM alerts and security monitoring platforms.
  
• Manage alert triage processes, investigation workflows, and escalation procedures.
  
• Analyze security alerts generated from:

1. SIEM platforms
2. EDR/XDR solutions
3. Network security tools
4. Cloud security monitoring tools
   

• Identify indicators of compromise (IOCs) and suspicious activities across systems.
  
• Lead initial investigation and containment of cybersecurity incidents.
  
• Escalate high-severity incidents to the Deputy CISO and incident response team.
  
• Maintain incident documentation, investigation records, and root-cause analysis reports.
  
• Develop and maintain SOC playbooks for common attack scenarios, including:

1. Phishing attacks
2. Malware infections
3. Account compromise
4. Insider threats
5. Distributed denial-of-service (DDoS) attacks
   

• Utilize threat intelligence feeds to improve detection capabilities.
  
• Update SIEM correlation rules and alert thresholds to reduce false positives and improve detection.
  
• Ensure monitoring coverage across critical infrastructure including:

1. Core banking systems
2. Digital banking platforms
3. Payment systems
4. Cloud infrastructure
5. Network devices
6. Endpoint security tools
   

• Prepare SOC operational reports including:

1. Security incidents summary
2. Threat trends analysis
3. False positive rates
4. Incident response time metrics
   

• Support continuous improvement of SOC operations and threat detection processes.

• Bachelor’s degree in Computer Science, Cybersecurity, or Information Technology.
• 5–8 years of experience in cybersecurity operations.
• Minimum 2–3 years of experience working in a SOC environment.
• Hands‑on experience with SIEM, EDR/XDR, threat monitoring, and incident response tools.
• Experience in banking, fintech, or financial services environments preferred.