Global SOC Lead: Master Incident Response & Detection

Altera; San Jose (CA); On-site; USD 149,000 - 216,000; Full time

Job summary

Altera is seeking an experienced Security Operations Center Lead to mature our global security monitoring, detection, and incident response capabilities. The role focuses on day-to-day SOC operations, alert triage, playbooks, threat monitoring, and reporting across enterprise IT, cloud, identity, endpoint, network, and applications.

The ideal candidate brings strong technical depth in security operations, leadership, and process ownership, with a track record of improving detection coverage,

Qualifications

• Bachelor’s degree or equivalent practical experience in a related field.
• 5+ years of progressive cybersecurity experience including hands-on operations, threat detection, or SOC leadership.
• 3+ years of experience leading SOC analysts or IR teams.
• Familiarity with frameworks such as MITRE ATT&CK, NIST CSF, and ISO 27001.
• CISSP, Security+, or equivalent certification.

Responsibilities

• Lead daily SOC operations across monitoring, triage, investigation, escalation and incident response coordination.
• Own and mature SOC procedures including incident intake, severity classification, and post-incident reviews.
• Manage detection use cases, alert fidelity, and SOC metrics.
• Coordinate with security engineers to improve log onboarding and data quality.
• Oversee analyst workflows, case documentation, and evidence handling.
• Collaborate with MSPs, IT teams, and business stakeholders for remediation ownership.

Skills

Leadership

Security operations

Incident response

Communication

Threat detection

Education

Bachelor’s degree in Computer Science/Engineering/Info Security

CISSP or Security+ certification

Tools

SIEM

SOAR

EDR/XDR

Cloud security monitoring

Identity security

Email security

Network security

Job description

Altera is seeking an experienced Security Operations Center Lead to mature our global security monitoring, detection, and incident response capabilities. The role focuses on day-to-day SOC operations, alert triage, playbooks, threat monitoring, and reporting across enterprise IT, cloud, identity, endpoint, network, and applications.

The ideal candidate brings strong technical depth in security operations, leadership, and process ownership, with a track record of improving detection coverage,