Global SOC Lead: Cyber Offense & IR

191 Altera Corporation; San Jose (CA); On-site; USD 149,000 - 216,000; Full time

Job summary

Altera seeks a Cyber Offense, SOC, and Incident Response Lead to manage the global SOC and incident response capabilities. You will establish playbooks, escalation procedures, and metrics while coordinating across endpoints, cloud, networks, and enterprise systems to improve detection and containment.

The role requires extensive experience in security operations, incident response, and detection engineering, with collaboration across security engineering, IT, cloud, and business stakeholders.

Qualifications

• Bachelor’s degree in CS/CE/Info Sec or related field
• 8+ years of progressive cybersecurity experience including SOC leadership
• 3+ years of experience leading SOC analysts or IR teams
• Strong knowledge of SIEM, SOAR, EDR/XDR, cloud and identity security processes
• Experience building detection use cases, alert triage workflows, and SOC metrics

Responsibilities

• Lead daily SOC operations including monitoring, triage, investigation, escalation and handoffs across global time zones
• Own SOC operating procedures, playbooks, escalation paths, and post‑incident reviews
• Improve security monitoring across SIEM, SOAR, EDR/XDR, cloud and identity security
• Build and tune detection use cases aligned to MITRE ATT&CK and enterprise risks
• Coordinate investigations involving phishing, malware and cloud security events
• Establish SOC performance metrics and reporting
• Oversee SOC analyst workflows, case documentation and evidence handling
• Coordinate with MSPs, IT teams, and business stakeholders on remediation actions

Skills

Cybersecurity leadership

Incident response

SOC operations

Threat detection

Communication with stakeholders

Documentation

Analytical thinking

Education

Bachelor’s degree in Computer Science, Computer Engineering, Information Security, Cybersecurity, or related field

Tools

Microsoft Sentinel

Microsoft Defender XDR

KQLs

UEBA

Job description

Altera seeks a Cyber Offense, SOC, and Incident Response Lead to manage the global SOC and incident response capabilities. You will establish playbooks, escalation procedures, and metrics while coordinating across endpoints, cloud, networks, and enterprise systems to improve detection and containment.

The role requires extensive experience in security operations, incident response, and detection engineering, with collaboration across security engineering, IT, cloud, and business stakeholders.