Global SOC & Incident Response Lead

Altera; San Jose (CA); Sur place; USD 149 000 - 216 000; Plein temps

Résumé du poste

Altera seeks a Cyber Offense, SOC, and Incident Response Lead to direct global SOC operations, incident response, and detection engineering. You will mature playbooks, improve telemetry, and drive cross‑functional collaboration across security, IT, and cloud teams.

The role demands extensive SOC leadership experience, strong incident coordination skills, and hands‑on expertise in SIEM/SOAR/EDR/XDR with a focus on scalable, repeatable processes.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Information Security, Cybersecurity, or related field, or equivalent practical experience.
• 8+ years of progressive cybersecurity experience, including hands‑on security operations, incident response, detection, or SOC leadership.
• 3+ years leading SOC analysts, IR teams, or cross‑functional cyber defense workflows.
• Strong working knowledge of SIEM, SOAR, EDR/XDR, cloud security monitoring, identity security, email security, network security, and IR processes.
• Demonstrated experience building or improving detection use cases, alert triage workflows, response playbooks, escalation procedures, and SOC metrics.
• Familiarity with MITRE ATT&CK, NIST CSF, NIST SP 800-61, ISO 27001, CIS Controls, or equivalent frameworks.

Responsabilités

• Lead daily SOC operations across monitoring, alert triage, investigation, escalation, incident response coordination, and handoff across global time zones.
• Own and mature SOC operating procedures, including incident intake, severity classification, escalation paths, response playbooks, major incident communications, and post-incident reviews.
• Manage and improve security monitoring across SIEM, SOAR, EDR/XDR, email security, cloud security, identity security, vulnerability signals, network telemetry, and threat intelligence sources.
• Build, tune, and improve detection use cases aligned to enterprise risks, MITRE ATT&CK techniques, threat intelligence, and asset priorities.
• Coordinate with security engineering teams to improve log onboarding, data quality, telemetry coverage, alert fidelity, automation, and response integrations.
• Lead incident response for events involving endpoint compromise, identity misuse, phishing, malware, data loss indicators, cloud misconfigurations, and suspicious network activity.

Connaissances

Security leadership

Incident response

Threat detection

Cross-functional leadership

Analytical thinking

Formation

Bachelor's degree in CS/CE/Info Security

Outils

SIEM

SOAR

EDR/XDR

Cloud security monitoring

Identity security

Description du poste

Altera seeks a Cyber Offense, SOC, and Incident Response Lead to direct global SOC operations, incident response, and detection engineering. You will mature playbooks, improve telemetry, and drive cross‑functional collaboration across security, IT, and cloud teams.

The role demands extensive SOC leadership experience, strong incident coordination skills, and hands‑on expertise in SIEM/SOAR/EDR/XDR with a focus on scalable, repeatable processes.