Global SOC Lead: Detection, Response & Automation

Altera; San Jose (CA); On-site; USD 149,000 - 216,000; Full time

Job summary

Altera seeks an experienced Security Operations Center Lead to drive global monitoring, detection, incident response, and cyber defense across enterprise IT, cloud, identity, and endpoints. You will own SOC operations, alert triage, and playbooks while partnering with security engineering, IT, and MSPs to ensure timely detection, investigation, containment, and remediation.

The role focuses on improving detection coverage, response quality, automation, and operational resilience across time

Qualifications

• Bachelor’s degree in Computer Science, Information Security or related field or equivalent experience.
• 5+ years in cybersecurity with hands‑on security operations and incident response.
• 3+ years leading SOC analysts or IR teams and cross‑functional workflows.

Responsibilities

• Lead daily SOC operations, triage alerts, coordinate incidents, and manage IOC investigations.
• Develop and mature detection use cases aligned to MITRE ATT&CK and enterprise risk.
• Oversee playbooks, escalation paths, and post‑incident reviews for continuous improvement.
• Coordinate with security engineering, cloud, identity, and MSPs to ensure containment and remediation.
• Measure SOC performance with MTTD, MTTR, SLA adherence, and incident trend reporting.

Skills

SIEM SOC operations

Incident response leadership

Threat detection

Playbooks & automation

Cross-functional collaboration

Education

Bachelor's degree in CS/IS/Cybersecurity

Tools

Microsoft Sentinel

Microsoft Defender XDR

KQL

Job description

Altera seeks an experienced Security Operations Center Lead to drive global monitoring, detection, incident response, and cyber defense across enterprise IT, cloud, identity, and endpoints. You will own SOC operations, alert triage, and playbooks while partnering with security engineering, IT, and MSPs to ensure timely detection, investigation, containment, and remediation.

The role focuses on improving detection coverage, response quality, automation, and operational resilience across time