SOC Supervisor

Hugo Bank; Karachi Division; On-site; PKR 1,800,000 - 2,800,000; Full time

Job summary

Hugo Bank is seeking a SOC Supervisor to lead the Security Operations Center team, overseeing threat detection and incident response across its digital banking infrastructure. You will ensure continuous monitoring and rapid containment of security events.

The role requires hands-on experience with SIEM/EDR/XDR, producing incident reports, updating playbooks, and coordinating with the CISO's office. Banking experience is preferred.

Qualifications

• Bachelor's degree in CS, cybersecurity or IT.
• 5–8 years of experience in cybersecurity operations.
• Minimum 2–3 years of experience working in a SOC environment.
• Hands-on experience with SIEM, EDR/XDR, threat monitoring and incident response tools.
• Experience in banking, fintech or financial services environments preferred.

Responsibilities

• Supervise SOC analysts responsible for monitoring security alerts and security telemetry.
• Ensure continuous 24/7 monitoring of SIEM alerts and security monitoring platforms.
• Manage alert triage processes, investigation workflows, and escalation procedures.
• Lead initial investigation and containment of cybersecurity incidents.
• Escalate high-severity incidents to the Deputy CISO and incident response team.
• Maintain incident documentation, investigation records, and root-cause analysis reports.
• Develop and maintain SOC playbooks for common attack scenarios, including: Phishing attacks, Malware infections, Account compromise, Insider threats, DDoS attacks.
• Utilize threat intelligence feeds to improve detection capabilities.
• Update SIEM correlation rules and alert thresholds to reduce false positives and improve detection.
• Ensure monitoring coverage across critical infrastructure including: Core banking systems, Digital banking platforms, Payment systems, Cloud infrastructure, Network devices, Endpoint security tools.
• Prepare SOC operational reports including: Security incidents summary, Threat trends analysis, False positive rates, Incident response time metrics.
• Support continuous improvement of SOC operations and threat detection processes.

Skills

SIEM

EDR/XDR

Threat monitoring

Incident response

Education

Bachelor’s degree in Computer Science, Cybersecurity, or Information Technology

Tools

SIEM platforms

EDR/XDR tools

Threat intelligence feeds

Job description

The SOC Supervisor is responsible for supervising the Security Operations Center (SOC) analysts and ensuring continuous monitoring of security events across the Bank’s digital banking infrastructure. The role involves overseeing threat detection, alert triage, incident investigation, and escalation processes to ensure timely response to cybersecurity threats affecting banking systems, cloud infrastructure, and payment platforms.

• Supervise SOC analysts responsible for monitoring security alerts and security telemetry.
  
• Ensure continuous 24/7 monitoring of SIEM alerts and security monitoring platforms.
  
• Manage alert triage processes, investigation workflows, and escalation procedures.
  
• Analyze security alerts generated from:

1. SIEM platforms
2. EDR/XDR solutions
3. Network security tools
4. Cloud security monitoring tools
   

• Identify indicators of compromise (IOCs) and suspicious activities across systems.
  
• Lead initial investigation and containment of cybersecurity incidents.
  
• Escalate high-severity incidents to the Deputy CISO and incident response team.
  
• Maintain incident documentation, investigation records, and root-cause analysis reports.
  
• Develop and maintain SOC playbooks for common attack scenarios, including:

1. Phishing attacks
2. Malware infections
3. Account compromise
4. Insider threats
5. Distributed denial-of-service (DDoS) attacks
   

• Utilize threat intelligence feeds to improve detection capabilities.
  
• Update SIEM correlation rules and alert thresholds to reduce false positives and improve detection.
  
• Ensure monitoring coverage across critical infrastructure including:

1. Core banking systems
2. Digital banking platforms
3. Payment systems
4. Cloud infrastructure
5. Network devices
6. Endpoint security tools
   

• Prepare SOC operational reports including:

1. Security incidents summary
2. Threat trends analysis
3. False positive rates
4. Incident response time metrics
   

• Support continuous improvement of SOC operations and threat detection processes.

• Bachelor’s degree in Computer Science, Cybersecurity, or Information Technology.
• 5–8 years of experience in cybersecurity operations.
• Minimum 2–3 years of experience working in a SOC environment.
• Hands‑on experience with SIEM, EDR/XDR, threat monitoring, and incident response tools.
• Experience in banking, fintech, or financial services environments preferred.