Global SOC Lead - Remote, Follow-the-Sun

The Bitcoin Street Journal; Warszawa; Hybrid; PLN 180,000 - 260,000; Full time

Job summary

The SOC Lead at Tether will oversee the global follow-the-sun Security Operations Center, guiding a distributed team to monitor, investigate, and respond to security events around the clock. Based in Europe, you will set operational standards, own incident response, and drive improvements in detection and handovers.

You’ll work hands-on with SIEM, EDR, SSE, and WAF, mentor SOC Analysts, manage shift schedules, and report metrics.

Qualifications

• 5+ years in Security Operations with hands-on practice.
• At least 1 year in a SOC Lead or team lead role.
• Experience triaging alerts and leading major incidents.
• Strong knowledge of EDR, SSE, SIEM, and WAF.
• Hands-on detection content tuning or tool-writing is a plus.
• Experience in 24/7 follow-the-sun SOC environments.
• Excellent English communication and leadership skills.

Responsibilities

• Lead a distributed SOC team across time zones in a follow-the-sun model.
• Own SOC schedule, rotations, and weekend coverage for 24/7 operations.
• Define handover processes ensuring seamless investigations.
• Act as incident lead for major security incidents and coordinate response.
• Conduct hands-on triage, investigation, and threat hunting across security tech.
• Develop and maintain runbooks, playbooks, and escalation matrices.

Skills

Leadership

Incident response

Threat hunting

SOC operations

Communication

Education

Bachelor's degree

Tools

EDR

SSE

SIEM

WAF

Job description

The SOC Lead at Tether will oversee the global follow-the-sun Security Operations Center, guiding a distributed team to monitor, investigate, and respond to security events around the clock. Based in Europe, you will set operational standards, own incident response, and drive improvements in detection and handovers.

You’ll work hands-on with SIEM, EDR, SSE, and WAF, mentor SOC Analysts, manage shift schedules, and report metrics.