Cyber Offense & SOC Lead — Incident Response

Altera; San Jose (CA); In loco; USD 149.000 - 216.000; Tempo pieno

Descrizione del lavoro

Altera in San Jose, CA seeks a Cyber Offense, SOC, and Incident Response Lead to run the global Security Operations Center and incident response capabilities across endpoints, identities, cloud environments, networks, and critical systems.

You will establish and mature SOC processes, runbooks, and metrics, lead IR for major incidents, collaborate with cross-functional teams, and drive automation and MITRE ATT&CK-aligned detection to scale defense.

Competenze

• Bachelor’s degree or equivalent practical experience.
• 8+ years in cybersecurity, including SOC leadership.
• 3+ years leading SOC analysts or IR teams.
• Strong knowledge of SIEM, SOAR, EDR/XDR, and cloud/security monitoring.
• Experience building detection use cases and SOC metrics.
• Experience coordinating phishing, malware, and cloud security events.
• Familiarity with MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls.
• Clear communication with technical and business stakeholders.
• CISSP, Security+ or equivalent certification.

Mansioni

• Lead daily SOC operations across global time zones.
• Mature incident intake, severity, escalation, and playbooks.
• Improve log onboarding, telemetry, alert fidelity, and automation.
• Lead incident response for endpoint, phishing, malware, cloud misconfig.
• Establish SOC metrics like MTTD, MTTD, MTTC and trends.
• Coordinate with MSPs, IT teams, and stakeholders for remediation.

Conoscenze

SIEM / SOAR

EDR/XDR

Cloud security

Threat detection

Incident response

Leadership

Formazione

Bachelor’s degree in CS/CE/Info Sec

Strumenti

Microsoft Sentinel

Microsoft Defender XDR

KQL

Descrizione del lavoro

Altera in San Jose, CA seeks a Cyber Offense, SOC, and Incident Response Lead to run the global Security Operations Center and incident response capabilities across endpoints, identities, cloud environments, networks, and critical systems.

You will establish and mature SOC processes, runbooks, and metrics, lead IR for major incidents, collaborate with cross-functional teams, and drive automation and MITRE ATT&CK-aligned detection to scale defense.