Security Operations Team Lead

nuHarbor; Atlanta (GA); Hybrid; USD 130,000 - 150,000; Full time

Benefits offered by this job

Annual bonus program

Paid time off

Comprehensive benefits

Job summary

nuHarbor is seeking a SOC Team Lead to act as the technical leader for a dedicated team of Security Analysts and Engineers. You will drive efficient SecOps, mitigate threats, and mature client cyber defense programs in a collaborative environment.

Responsibilities include steering investigations, mentoring analysts, and coordinating across teams to deliver timely remediation and value to clients. This role requires US citizenship and onsite presence in Atlanta two days per week.

Qualifications

• Bachelor’s Degree in a related field plus five or more years in Security Operations (SecOps).
• In lieu of a degree, two years of experience in a related technology field and relevant industry certifications are required.
• Experience executing initial triaging and response through Splunk.
• Demonstrated experience executing security event triaging and tuning.
• Demonstrated experience writing playbooks and support procedures.
• Demonstrated experience as a technical lead for security operations.
• Proven experience performing incident response, threat hunting, malware analysis, detection creation, threat intelligence, and automation.
• Strong understanding of Incident Response phases and demonstrated experience responding to security incidents.
• Demonstrated experience with detection engineering and threat hunting through SIEM and EDR toolset.
• Demonstrated experience with managing and maintaining EDR or Security Orchestration Automation and Response solutions (CrowdStrike, SentinelOne, Splunk Enterprise Security).
• Demonstrated experience with scripting in industry standard languages for automation.
• Demonstrated experience communicating and presenting to executive level client stakeholders.
• Demonstrated experience with FedRAMP and NIST 800‑53.

Responsibilities

• Lead and mentor a team of Security Analysts and Security Engineers, ensuring efficient SecOps operations.
• Analyze security alerts, events, and trends and communicate the value of NuHarbor services to clients.
• Conduct investigations and provide actionable escalations and recommendations to clients.
• Support analysts with ticket intake, disposition, and escalation within SLA requirements.
• Serve as the primary technical escalation point for complex or high‑severity incidents and guide response efforts.
• Perform QA checks on analysts’ work to ensure accuracy and adherence to procedures.
• Contribute to SOC process improvements and SOP documentation.
• Provide training and guidance to analysts and engineers, fostering career development.
• Develop recommendations to mature client cybersecurity programs and act as a cross‑team liaison.
• Communicate escalations or advanced threats to leadership and stakeholders as needed.
• Give real‑time feedback to analysts/engineers and help them grow skills and goals.
• Conduct 1 on 1 meetings with staff to mentor and assess progress.

Skills

Incident Response

Threat Hunting

Automation

Scripting

Executive Communication

SIEM

EDR

Education

Bachelor's Degree in related field

Tools

CrowdStrike

SentinelOne

Splunk Enterprise Security

Splunk

Job description

Cybersecurity for the public good

At nuHarbor, we help organizations navigate an increasingly complex cybersecurity landscape with confidence. By combining expert guidance, innovative technology, and trusted partnerships, we make security stronger, more effective, and easier to understand. We’re looking for talented individuals who are passionate about solving meaningful challenges, helping clients succeed, and continuously improving alongside a team that values curiosity, collaboration, and impact.

The Opportunity

The SOC Team Lead role serves as the technical leader for a dedicated team of Security Analysts and Security Engineers. They are accountable for ensuring SecOps team operates efficiently, mitigates threats in a timely manner, and matures organizational cyber defense programs. The SOC Team Lead leverages their highly technical expertise, leadership communication and decision‑making skills to enable the team and cross‑department collaboration.

What Success Looks Like

• Lead by example working consistently with the nuHarbor values: Help Clients Win, Always Improve, Protect the House.
• Are responsible and accountable for analyzing security alerts, events, and trends to effectively communicate the value of NuHarbor services.
• Conduct investigations independently and provide actionable, context‑relevant escalations and recommendations to clients.
• Support the security analysts with ticket intake, disposition, and escalation within SLA requirements.
• Serve as the primary technical escalation point for complex or high‑severity security incidents. Guide the investigation and response efforts to ensure timely and effective remediation.
• Perform regular quality assurance checks on analysts’ work, including alert triage, investigation notes, and incident reports, to ensure accuracy, thoroughness, and adherence to established procedures.
• Contribute to the development, documentation, and refinement of SOC processes, standard operating procedures (SOPs).
• Train, mentor, and support security analysts and security engineers autonomously.
• Develop recommendations and enhancements to mature a client’s cybersecurity program as a trusted cross‑team liaison.
• Demonstrate a team‑first mindset and proactively support operations without direct leader assignment.
• Communicate effectively with leadership or key stakeholders regarding escalations or advanced threats that require incident response actions.
• Provide constructive, real‑time feedback to analysts and engineers on their technical work and help them develop their skills and career goals.
• Perform 1 on 1 meetings with security analysts and security engineers.

Your Foundation

We’re looking for someone who brings these minimum qualifications:

• Bachelor’s Degree in a related field and five (5) or more years in Security Operations (SecOps).
  • In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.
• Experience executing initial triaging and response through Splunk.
• Demonstrated experience executing security event triaging and tuning.
• Demonstrated experience writing playbooks and support procedures.
• Demonstrated experience as a technical lead for security operations.
• Proven experience performing the following advanced techniques: incident response, threat hunting, malware analysis, detection creation, threat intelligence, and automation.
• Strong understanding of Incident Response phases and demonstrated experience responding to security incidents.
• Demonstrated experience with detection engineering and threat hunting through both a SIEM and EDR toolset.
• Demonstrated experience with managing and maintaining Endpoint Detection and Response (EDR) or Security Orchestration Automation and Response solutions.
  • CrowdStrike
  • SentinelOne
  • Splunk Enterprise Security
• Demonstrated experience with scripting in industry standard languages in a manner that supports automation solutions.
• Demonstrated experience communicating and presenting to executive level client stakeholders.
• Demonstrated experience with FedRAMP and NIST 800‑53.
• Must be a citizen of the United States.
• Must be located in the Atlanta, GA metro area and willing and able to be in office two days per week.

Stand out With

You may stand out if you have experience with:

• Seven (7) or more years in the Security Operations (SecOps).
• Holds at least two relevant industry certifications (GCFA, GNFA, GCIH, BTL1, BTL2, CySa+, CISSP, CISM, etc.)
• Technical writing and reporting experience.
• Experience with multiple operating systems (Linux, Cloud providers, Windows), their command lines, processes, and file systems.
• Experience building and scaling Security Operations Centers.
• Experience with static and dynamic malware analysis.
• Experience providing cyber risk recommendations to harden existing security controls.
• Experience identifying gaps within security control architecture.
• Talent for communicating complex topics in an easily digestible manner.
• Experience with artificial intelligence (AI) technologies, deployment, and hardening procedures
• Experience working in multiple cybersecurity disciplines (i.e. Detection Engineering, Threat Hunting, Threat Intelligence, Information Assurance, Security Engineering, etc.)
• Why nuHarbor?

At nuHarbor, you’ll find more than a job - you’ll find a team committed to helping each other grow, solve meaningful problems, and make a measurable impact.

You can expect:

• A collaborative, high‑performing team environment
• Leaders who are invested in your success and development
• Meaningful work that helps organizations protect critical services and missions
• The encouragement to bring your authentic self to work every day
• Competitive pay, performance‑based bonus opportunities, generous paid time off, and comprehensive benefits

Compensation

This position has an anticipated base salary range of $130,000–$150,000 annually , plus eligibility for nuHarbor’s annual bonus program with a target opportunity of 10%.

Actual compensation is based on factors including experience, skills, certifications, and geographic location.

Join Us

At nuHarbor, we believe great security starts with great people. We’re looking for curious problem‑solvers, trusted advisors, and continuous learners who are passionate about helping clients win.

AAP/EEO Statement

The Equal Employment Opportunity Policy of nuHarbor is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. nuHarbor hires and promotes individuals solely based on their qualifications for the job to be filled.

nuHarbor believes that employees should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. We expect and require the cooperation of all employees in maintaining a discrimination and harassment‑free atmosphere.