Onsite SOC Lead | Incident Response & Playbooks

SFE; Utah; On-site; USD 120,000 - 170,000; Full time

Job summary

SFE in Draper, Utah, is seeking a Cyber Ops Lead to head SOC operations and incident response on-site. You will triage alerts, drive case resolution, and lead the SOC team with a focus on improving playbooks and processes.

Ideal candidates have 5+ years in a security operations setting, strong cross-functional communication, and hands-on experience with SIEM/EDR tools, incident response, and escalation paths. On-site presence is required.

Qualifications

• 5+ years in a Security Operations Center or similar cyber defense role, with 1–2 years in lead capacity.
• Experience managing case/ticket queues and driving resolution in a fast-paced environment.
• Working knowledge of SIEM, EDR, and case/ticket management tooling.
• Solid understanding of incident response fundamentals (triage, containment, escalation).
• Strong written and verbal communication; able to convey technical details to varied audiences.
• Willingness to work on-site in Draper, UT, including on-call rotations.

Responsibilities

• Own the SOC queue: triage alerts, assign priority, track cases to resolution.
• Maintain case SLAs and identify bottlenecks to prevent backlogs.
• Ensure consistent documentation and closure quality across all cases.
• Lead day-to-day SOC operations: monitoring, alert triage, initial response.
• Coordinate shift coverage and on-call rotations for continuous monitoring.
• Serve as senior escalation point for complex cases and improve detection content.
• Partner with Technology Operations on cross-team issues and changes.
• Participate in change management and operational reviews with security input.
• Support incident response, including containment guidance and cross-team coordination.
• Mentor SOC analysts and support onboarding and skills development.
• Track and report SOC metrics to leadership and flag trends needing action.

Skills

5+ years in SOC

Lead / senior analyst experience

Queue/case management

Cross-functional collaboration

Strong written/verbal communication

On-site in Draper, UT

Tools

SIEM

EDR

Ticketing tools

Job description

SFE in Draper, Utah, is seeking a Cyber Ops Lead to head SOC operations and incident response on-site. You will triage alerts, drive case resolution, and lead the SOC team with a focus on improving playbooks and processes.

Ideal candidates have 5+ years in a security operations setting, strong cross-functional communication, and hands-on experience with SIEM/EDR tools, incident response, and escalation paths. On-site presence is required.