Cyber Ops Lead: SOC Leadership & Incident Response

Tata Consultancy Services; Draper (UT); On-site; USD 100,000 - 120,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage

Family Support: Parental Leaves

Auto & Home Insurance

Certification & Training Reimbursement

Job summary

Tata Consultancy Services in Draper, UT, is seeking a Cyber Ops Lead I SOC Lead with 7+ years in security operations. You will own the SOC case queue, lead day-to-day operations, and coordinate with Tech Operations.

This role requires certifications, cloud security experience, and the ability to develop playbooks, mentor analysts, and report metrics to the Director. On-site work in Draper is required.

Qualifications

• 7+ years in a Security Operations Center or similar cyber defense role.
• 1–2 years in a lead, senior analyst, or shift-lead capacity.
• Demonstrated experience managing case/ticket queues and driving them to resolution in a fast-paced environment.
• Working knowledge of SIEM, EDR, and case/ticket management tooling.
• Solid understanding of incident response fundamentals (triage, containment, escalation).
• Comfortable working cross-functionally with Technology Operations, IT, and Engineering teams.

Responsibilities

• Own the SOC case queue: triage incoming alerts, tickets, and requests; assign priority and ownership; track cases through to resolution.
• Maintain SLAs for case handling and escalation; identify and clear bottlenecks before they become backlogs.
• Ensure consistent documentation, categorization, and closure quality across all cases.
• Lead day-to-day SOC operations, including monitoring, alert triage, and initial incident response.
• Coordinate shift coverage and on-call rotations to maintain continuous monitoring.
• Serve as a senior escalation point for analysts on complex or ambiguous cases.
• Drive continuous improvement of detection content, playbooks, and standard operating procedures.
• Act as the primary liaison between Cyber Defense and Tech Operations on issues that span both teams.
• Coordinate response and remediation activities that require Tech Operations involvement.
• Participate in change management and operational reviews where security input is needed.
• Support incident response efforts, including initial triage, containment recommendations, and coordination across teams during active incidents.
• Contribute to post-incident reviews and help translate lessons learned into process or tooling improvements.
• Mentor and provide day-to-day guidance to SOC analysts; support onboarding and skills development.
• Help set expectations for case quality, communication, and escalation practices.
• Track and report on SOC operational metrics to the Director, Cyber Defense & Strategy.

Skills

Regulated industry

Cloud security

SOC playbooks

Queue triage

Escalation paths

Team leadership

Reporting

Tools

SIEM

EDR

Ticketing system

Job description

Tata Consultancy Services in Draper, UT, is seeking a Cyber Ops Lead I SOC Lead with 7+ years in security operations. You will own the SOC case queue, lead day-to-day operations, and coordinate with Tech Operations.

This role requires certifications, cloud security experience, and the ability to develop playbooks, mentor analysts, and report metrics to the Director. On-site work in Draper is required.