SOC Team Lead

UnderDefense Inc.; Polska; Remote; PLN 120,000 - 160,000; Full time

Job summary

UnderDefense Inc. seeks a SOC Team Lead to oversee daily security operations and guide a team of SOC analysts in a fully remote role. You will monitor events across client environments, coordinate triage and response, and refine playbooks while collaborating with engineering and product teams to optimize integrations.

You will mentor staff, ensure thorough incident reporting, and contribute to compliance initiatives in a distributed setting requiring strong communication across time zones.

Qualifications

• Strong SOC leadership and operations experience, including managing SOC analysts, coordinating incident response, and overseeing shift coverage.
• Experience with SIEM, EDR, NDR, SOAR and automation in security workflows.
• Solid understanding of incident handling, threat detection, triage, and escalation across environments (on-prem, cloud, hybrid).
• Knowledge of ISO 27001, SOC 2, PCI DSS, GDPR, HIPAA and audit/compliance support.
• Strong analytical and problem-solving skills with risk-based decision making.
• Clear written and verbal communication; experience preparing incident reports and runbooks.
• Experience in a remote distributed team environment and across time zones.
• Bachelor's degree in CS/InfoSec or related field.

Responsibilities

• Oversee day-to-day security operations and lead a team of SOC analysts.
• Monitor security events across client environments and coordinate triage and response.
• Design and refine playbooks; improve alert handling workflows.
• Collaborate with engineering and product teams to optimize integrations with security stacks.
• Mentor and coach team members; review complex cases and escalations.
• Maintain documentation and reporting; support continuous improvement of detection and response strategies.
• Participate in client communications and help with compliance initiatives.

Skills

SOC leadership

Security monitoring tools

Incident handling

Threat detection

Analytical skills

Communication skills

Remote work experience

Audit/compliance support

Education

Bachelor's degree in CS/InfoSec

Tools

SIEM

EDR

NDR

SOAR

Job description

Company Description

UnderDefense is an Agentic AI SOC and Compliance Automation platform trusted by more than 200 enterprises across the US and EU. The platform operates on top of existing security stacks, eliminating the need for tool replacement or added headcount while enabling teams to focus on strategic security decisions. Its Agentic AI SOC automates enrichment, correlation, and triage, delivering machine-speed investigations and rapid alert handling with human review at key decision points. UnderDefense also offers MAXI Compliance AI, which continuously collects evidence for frameworks such as ISO 27001, SOC 2, PCI DSS, GDPR, and HIPAA, accelerating time-to-compliance and providing a real-time Trust Center view of security posture. The company focuses on combining advanced automation with human expertise to help organizations strengthen both security operations and compliance processes.

Role Description

The SOC Team Lead is a full-time remote role responsible for overseeing day-to-day security operations and leading a team of SOC analysts. This role includes monitoring security events across client environments, coordinating incident triage and response, and ensuring effective use of UnderDefense's Agentic AI SOC capabilities for investigation and automation. The SOC Team Lead will design and refine playbooks, improve alert handling workflows, and collaborate with engineering and product teams to optimize integrations with existing security stacks. Daily tasks involve mentoring and coaching team members, reviewing complex cases and escalations, ensuring consistent documentation and reporting, and contributing to continuous improvement of detection and response strategies. The person in this role will also participate in client communications, support compliance-related initiatives, and help maintain high service quality and operational resilience.

Qualifications

• Strong SOC leadership and operations experience, including managing SOC analysts, coordinating incident response, and overseeing shift coverage.
• Hands-on expertise with security monitoring tools (e.g., SIEM, EDR, NDR, SOAR) and familiarity with integrating automation and AI into security workflows.
• Solid understanding of security incident handling, threat detection, triage, and escalation processes across diverse environments (on-premises, cloud, hybrid).
• Knowledge of common security frameworks and standards (e.g., ISO 27001, SOC 2, PCI DSS, GDPR, HIPAA) and experience supporting audit or compliance efforts.
• Strong analytical and problem-solving skills, including the ability to interpret complex security data, make risk-based decisions, and prioritize effectively.
• Clear and concise written and verbal communication skills, with experience preparing incident reports, runbooks, and stakeholder updates.
• Experience in a remote, distributed team environment, with the ability to collaborate across time zones and work independently with minimal supervision.
• Bachelor's degree in Computer Science, Information Security, or a related field, or