SOC Operations AVP - Hybrid Leader (4 days in/1 remote)

Icapital, Llc; Lisboa; Híbrido; EUR 90 000 - 130 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health insurance

Equity

Annual bonus

PTO

Resumo da oferta

iCapital is seeking a Security Operations Manager (AVP) to lead the Global Information Security SOC in Lisbon, Portugal. You will guide daily monitoring, triage, and incident response, while mentoring a team of SOC analysts.

You will partner across Threat Detection Engineering, Cloud Security, and Incident Response to strengthen cyber resiliency. The role emphasizes people management, runbooks, escalation, and alignment with case-driven priorities.

Qualificações

• 5-8 years of experience in security operations and SOC functions.
• Experience leading or managing a SOC or security-ops team.
• Hands-on SIEM/SOAR setup and operational management.
• Knowledge of NIST and MITRE ATT&CK frameworks.
• Proficiency with Linux, Windows and macOS.
• Experience with cloud infrastructure, AWS preferred.

Responsabilidades

• Manage day-to-day SOC operations including monitoring, alerting, triage, and incident response.
• Lead, mentor, and develop SOC analysts; manage scheduling, on-call coverage, and onboarding.
• Create and maintain runbooks, playbooks, and incident procedures; daily/weekly/monthly checklists.
• Operate and tune SIEM and SOAR platforms; maintain dashboards and alerts.
• Triage incidents, set priorities, and coordinate with other teams.
• Collaborate with Cyber Case Manager to flow incidents into case management.
• Coordinate with Threat Detection Engineering, Cloud Security, and Incident Response teams.
• Measure and report on cyber defenses and operational metrics to leadership.
• Serve as escalation point for high-severity incidents outside business hours as needed.
• Drive evaluation, selection, and configuration of key security tools.

Conhecimentos

SOC management

People leadership

Incident response

SIEM management

Threat detection coordination

English proficiency

Cross-team collaboration

Analytical skills

Ferramentas

Splunk

SOAR

AWS

Descrição da oferta de emprego

iCapital is seeking a Security Operations Manager (AVP) to lead the Global Information Security SOC in Lisbon, Portugal. You will guide daily monitoring, triage, and incident response, while mentoring a team of SOC analysts.

You will partner across Threat Detection Engineering, Cloud Security, and Incident Response to strengthen cyber resiliency. The role emphasizes people management, runbooks, escalation, and alignment with case-driven priorities.