Global SOC Lead - 24/7 Incident Response & Detection

UBQ; Warszawa; Remote; PLN 320,000 - 520,000; Full time

Job summary

UBQ is seeking a SOC Lead to run a global follow-the-sun SOC. You will lead a distributed team across regions, own the incident response process, and drive detections and playbooks with a strong hands-on security background.

You will mentor analysts, define shift rotations, and coordinate cross-team incident handling while maintaining high security standards. Remote Europe-wide operations are supported.

Qualifications

• 5+ years of hands-on Security Operations experience, including at least 1 year in a SOC Lead/leadership role.
• Experience triaging alerts, investigating incidents, and leading response to major incidents in production.
• Solid knowledge of core security technologies (EDR, SSE, SIEM, WAF) and how to tune/detect across them.
• Experience in 24/7 follow-the-sun SOC with remote teams across time zones.

Responsibilities

• Lead a distributed team of SOC Analysts across multiple regions and time zones.
• Own the SOC schedule and shift rotations, including weekends, ensuring 24/7 coverage.
• Define and enforce the shift handover process to maintain continuity.
• Act as the incident lead for major security incidents, coordinating triage, containment, eradication, recovery, and post-incident reviews.
• Hands-on triage, investigation, and threat hunting across the security stack (SIEM, EDR, SSE, WAF).
• Review investigations and incident documentation, providing structured feedback and standards.
• Define, track, and report SOC metrics and KPIs (alerts, MTTD, MTTR, false positives).
• Drive detection content improvements with security engineering (tuning SIEM, EDR, WAF rules).
• Develop and maintain incident response playbooks and escalation matrices.
• Collaborate with IT, security, and management to resolve incidents and support operations.
• Support vulnerability management and overall security posture improvement.

Skills

SOC leadership

Incident response

Threat hunting

SIEM

EDR

WAF

MITRE ATT&CK

English communication

Education

Bachelor's degree in IT, Cybersecurity, CS or related field

Tools

EDR

SSE

SIEM

WAF

Job description

UBQ is seeking a SOC Lead to run a global follow-the-sun SOC. You will lead a distributed team across regions, own the incident response process, and drive detections and playbooks with a strong hands-on security background.

You will mentor analysts, define shift rotations, and coordinate cross-team incident handling while maintaining high security standards. Remote Europe-wide operations are supported.