Senior SOC Lead – Detection & Response

Legends Global; Frisco (TX); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental and Vision insurance

Life and Disability insurance

401k plan

Paid vacation

Job summary

Legends Global is seeking a Security Operations Lead to drive detection, triage, and incident response across the enterprise. You will mentor the SOC team, develop playbooks, and lead threat hunting using advanced telemetry and threat intelligence.

The role combines hands-on incident handling with detection engineering and automation, reporting to the VP of Cyber Security. Hybrid work supported from Dallas/Frisco, TX or Conshohocken, PA.

Qualifications

• Proven experience in a SOC or equivalent detection/response function.
• Three to five years in Security Operations, Detection and Response, or Incident Handling; SOC experience required.
• Hands-on experience with SIEM and EDR platforms; familiarity with SOAR.
• Proficiency in detections, rule tuning, enrichment pipelines, and alert routing.

Responsibilities

• Independently lead complex or high‑impact security incidents and improve SOC processes, tools, and response capabilities.
• Provide technical guidance and mentorship to SOC Analysts; develop and operationalize playbooks.
• Lead alert triage, enrichment, prioritization, and false‑positive suppression.
• Author detection requirements and tune SIEM rules; develop hunting hypotheses and lead hunt efforts.
• Design detection strategies across kill chain; execute end‑to‑end incidents including containment and eradication.
• Conduct post‑incident reviews and drive remediation and RCAs with engineering teams.

Skills

SOC operations

Python scripting

PowerShell scripting

Bash scripting

SIEM tuning

IR playbooks

Executive comms

Mentor teammates

Tools

Google Security Operations

Microsoft Sentinel

IBM QRadar

CrowdStrike

Microsoft Defender

SentinelOne

SOAR platforms

Job description

Legends Global is seeking a Security Operations Lead to drive detection, triage, and incident response across the enterprise. You will mentor the SOC team, develop playbooks, and lead threat hunting using advanced telemetry and threat intelligence.

The role combines hands-on incident handling with detection engineering and automation, reporting to the VP of Cyber Security. Hybrid work supported from Dallas/Frisco, TX or Conshohocken, PA.