Senior SOC Lead: Cloud-Native Incident Response

ID.me; McLean (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

ID.me is seeking a highly experienced SOC Lead to safeguard our digital identity ecosystem. As a key member of our Security Operations team, you will manage complex security incidents, lead threat hunting, and drive improvements across incident response processes in cloud-native environments.

You will mentor junior analysts, collaborate with cross-functional teams, and stay ahead of emerging threats using SIEM, EDR, DLP, and other security tools.

Qualifications

• 8+ years of experience in information security with incident response, threat hunting and forensic analysis.

Responsibilities

• Lead cyber security incident response for cloud-native infrastructure and coordinate rapid containment and root-cause analysis across cloud workloads.
• Oversee host and network-based forensic collection and analysis for effective containment and post-incident evaluation.
• Detect, analyze, and mitigate complex threats using DLP, SIEM, IDS/IPS, EDR and firewalls.
• Conduct proactive threat hunting and respond to Indicators of Compromise and TTPs in cloud/container environments.
• Lead projects related to security monitoring, incident response, and SOC process improvement.
• Mentor junior SOC analysts and collaborate with Tier 2/3 staff to ensure accurate incident reporting.
• Maintain awareness of security risks in cloud-native environments (GCP, Kubernetes, CI/CD) and drive rapid incident response.
• Leverage AI/ML tools to augment incident response and SOC automation.
• Stay updated on cybersecurity trends and emerging threats to strengthen our incident response capabilities.

Skills

Incident response

Threat hunting

Forensic analysis

Kubernetes

Cloud (GCP)

CI/CD security

Container security

SIEM tools

Leadership

AI/ML for security

Tools

Chronicle

Splunk

EDR

IDS/IPS

Firewalls

Job description

ID.me is seeking a highly experienced SOC Lead to safeguard our digital identity ecosystem. As a key member of our Security Operations team, you will manage complex security incidents, lead threat hunting, and drive improvements across incident response processes in cloud-native environments.

You will mentor junior analysts, collaborate with cross-functional teams, and stay ahead of emerging threats using SIEM, EDR, DLP, and other security tools.