Cyber Ops Lead I Soc Lead

Tata Consultancy Services; Draper (UT); On-site; USD 100,000 - 120,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage

Family Support: Leaves

Insurance Options: Auto & Home

Certification & Training Reimbursement

Vacation & Holidays

401K Plan & College Fund

Job summary

Tata Consultancy Services Limited in Draper, UT is seeking a Cyber Ops Lead I SOC Lead with 7+ years of security operations experience. The role focuses on leading SOC case triage, incident response, and collaboration with Technology Operations to maintain continuous monitoring.

Responsibilities include managing case queues, maintaining SLAs, mentoring analysts, and driving improvements to playbooks and detection content. On-site work in Draper is required.

Qualifications

• 5+ years of experience in a Security Operations Center or similar cyber defense role, including at least 1-2 years in a lead, senior analyst, or shift-lead capacity.
• Demonstrated experience managing case/ticket queues and driving them to resolution in a fast-paced environment.
• Working knowledge Of SIEM, EDR, and case/ticket management tooling
• Solid understanding Of incident response fundamentals (triage, containment, escalation).
• Comfortable working cross-functionally with Technology Operations, IT, and Engineering teams.
• Strong written and verbal communication skills; able to translate technical detail for varied audiences.
• Willingness and ability to work on-site in Draper, UT, including participation in on-call/shift coverage as needed.

Responsibilities

• Own the SOC case queue: triage incoming alerts, tickets, and requests; assign priority and ownership; track cases through to resolution.
• Maintain SLAs for case handling and escalation; identify and clear bottlenecks before they become backlogs.
• Ensure consistent documentation, categorization, and closure quality across all cases.
• Lead day-to-day SOC operations, including monitoring, alert triage, and initial incident response.
• Coordinate shift coverage and on-call rotations to maintain continuous monitoring.
• Serve as a senior escalation point for analysts on complex or ambiguous cases.
• Drive continuous improvement Of detection content, playbooks, and standard operating procedures.
• Act as the primary liaison between Cyber Defense and Tech Operations on issues that span both teams (eg., system changes, outages, access requests, infrastructure-related findings).
• Coordinate response and remediation activities that require Tech Operations involvement, ensuring clear handoffs and shared visibility into status.
• Participate in change management and operational reviews where security input is needed.
• Support incident response efforts, including initial triage, containment recommendations, and coordination across teams during active incidents.
• Contribute to post-incident reviews and help translate lessons learned into process or tooling improvements.
• Mentor and provide day-to-day guidance to SOC analysts; support onboarding and skills development.
• Help set expectations for case quality, communication, and escalation practices.
• Track and report on SOC operational metrics (case volume, time-to-triage, time-to-resolution, escalation rates) to the Director, Cyber Defense & Strategy.
• Flag trends or recurring issues that indicate a need for process, tooling, or staffing changes.

Skills

SIEM

EDR

Case management

Lead experience

SOC SME

Tools

Ticketing systems

SOC playbooks

Job description

Role - Cyber Ops Lead I SOC Lead

Experience Required -7+ Years

Must Have Technical/Functional Skills

• Experience in a regulated industry (healthcare, financial services, or similar) handling sensitive data.
• Relevant certifications such as GCIH, GCIA, Security+, CySA+, or equivalent.
• Familiarity with cloud environments (AWSlAzure) and common cloud security tooling.
• Prior experience building or refining SOC playbooks, runbooks, or standard operating procedures.
• SOC case queue is triaged consistently with clear ownership and no unexplained aging
• Escalation paths to Tech Operations are documented and running smoothly, with fewer dropped handoffs.
• Analyst team has clear expectations, regular feedback, and improving case quality.
• Director, Cyber Defense & Strategy has reliable visibility into SOC health through regular reporting

Roles & Responsibilities

Key Responsibilities

Case & Queue Management

• Own the SOC case queue: triage incoming alerts, tickets, and requests; assign priority and ownership; track cases through to resolution.
• Maintain SLAs for case handling and escalation; identify and clear bottlenecks before they become backlogs.
• Ensure consistent documentation, categorization, and closure quality across all cases.

SOC Leadership & Operations

• Lead day-to-day SOC operations, including monitoring, alert triage, and initial incident response.
• Coordinate shift coverage and on-call rotations to maintain continuous monitoring.
• Serve as a senior escalation point for analysts on complex or ambiguous cases.
• Drive continuous improvement Of detection content, playbooks, and standard operating procedures.

Partnering with Technology Operations

• Act as the primary liaison between Cyber Defense and Tech Operations on issues that span both teams (eg., system changes, outages, access requests, infrastructure-related findings).
• Coordinate response and remediation activities that require Tech Operations involvement, ensuring clear handoffs and shared visibility into status.
• Participate in change management and operational reviews where security input is needed.

Incident Response

• Support incident response efforts, including initial triage, containment recommendations, and coordination across teams during active incidents.
• Contribute to post-incident reviews and help translate lessons learned into process or tooling improvements.

Mentorship & Team Development

• Mentor and provide day-to-day guidance to SOC analysts; support onboarding and skills development.
• Help set expectations for case quality, communication, and escalation practices.

Reporting & Metrics

• Track and report on SOC operational metrics (case volume, time-to-triage, time-to-resolution, escalation rates) to the Director, Cyber Defense & Strategy.
• Flag trends or recurring issues that indicate a need for process, tooling, or staffing changes.

Required Qualifications

5+ years of experience in a Security Operations Center or similar cyber defense role, including at least 1-2 years in a lead , senior analyst, or shift-lead capacity

• Demonstrated experience managing case/ticket queues and driving them to resolution in a fast-paced environment.
• Working knowledge Of SIEM, EDR, and case/ticket management tooling
• Solid understanding Of incident response fundamentals (triage, containment, escalation).
• Comfortable working cross-functionally with Technology Operations, IT, and Engineering teams.
• Strong written and verbal communication skills; able to translate technical detail for varied audiences.
• Willingness and ability to work on-site in Draper, UT, including participation in on-call/shift coverage as needed.

Base Salary Range : $100,000 to $120,000 Per Annum

TCS Employee Benefits Summary:

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Location

Draper, UT

Function

TECHNOLOGY

Role

Analyst

ID

434150

Skills

SOC SME

Salary Range

$100,000 - $120,000