Lead SOC Analyst - Remote/Hybrid, Mentorship & Impact

deepwatchinc; United States; Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical, dental, vision

Disability coverage

Flexible time off

Retirement plan

Professional development funding

Job summary

Deepwatchinc seeks an experienced Security Operations Lead to manage day-to-day incident triage and investigations from a home office or hybrid Tampa site. You will guide analysts through complex threats, escalate as needed, and ensure timely, thorough reporting across customer environments.

The role blends hands-on analysis with coaching, process improvement, and close collaboration with threat response, security response, and product teams.

Qualifications

• 5+ years of security operations experience.
• Strong cybersecurity knowledge; advise on complex escalations.
• Ability to communicate investigation findings and guide response decisions.
• Eligibility as a U.S. person under applicable export-control rules.
• Ability to work from a home office when remote and pass a pre-employment background check.

Responsibilities

• Lead analysts through complex investigations, including effective SIEM analysis.
• Serve as the shift's escalation point and determine next steps for critical investigations.
• Take ownership of high-complexity customer incidents and ensure timely reporting.
• Coordinate with threat response resources when an incident requires additional support.
• Coach analysts and participate in peer review of escalated analysis.
• Contribute to operational improvement projects with leadership and product teams.

Skills

Security operations

Incident response

Threat analysis

Communication

U.S. person eligibility

Job description

Deepwatchinc seeks an experienced Security Operations Lead to manage day-to-day incident triage and investigations from a home office or hybrid Tampa site. You will guide analysts through complex threats, escalate as needed, and ensure timely, thorough reporting across customer environments.

The role blends hands-on analysis with coaching, process improvement, and close collaboration with threat response, security response, and product teams.