Senior SOC Lead — Hybrid Incident Response

Legends Global; West Conshohocken (PA); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life and disability insurance

Paid vacation

401k plan

Job summary

Legends Global is seeking a Security Operations Lead for a hybrid role based at our Conshohocken, PA HQ or Dallas/Frisco, TX. You will drive the SOC program, lead complex incidents, tune SIEM/EDR, and mentor analysts to improve detection and response capabilities.

You will build playbooks, develop enrichment pipelines, and champion automation-forward incident response while working with cross-functional teams to strengthen enterprise security posture.

Qualifications

• Three to five years of experience in Security Operations, Detection and Response, or Incident Handling.

Responsibilities

• Independently lead complex or high-impact security incidents and improve SOC processes, tools, and response capabilities.
• Provide technical guidance and mentorship to SOC Analysts, establishing standards for documentation, communication, and delivery.
• Build and operationalize SOC playbooks and escalation workflows.
• Lead alert triage, enrichment, prioritization, and false-positive suppression.
• Author detection requirements and tune SIEM rules.
• Develop threat-hunting hypotheses and lead hunt efforts using telemetry and threat intelligence.
• Design detection strategies across the kill chain and advance enterprise detection.
• Execute complex incidents end-to-end including containment, eradication, documentation, and communication.
• Conduct post-incident reviews and drive remediation and control improvements.
• Promote industry collaboration and embed resilient detection engineering practices.
• Advocate for automation-first incident response.

Skills

SOC Operations

Threat Hunting

Incident Response

Python/PowerShell/Bash

Communication

Tools

Google Security Operations

Microsoft Sentinel

IBM QRadar

CrowdStrike

Microsoft Defender

SentinelOne

Job description

Legends Global is seeking a Security Operations Lead for a hybrid role based at our Conshohocken, PA HQ or Dallas/Frisco, TX. You will drive the SOC program, lead complex incidents, tune SIEM/EDR, and mentor analysts to improve detection and response capabilities.

You will build playbooks, develop enrichment pipelines, and champion automation-forward incident response while working with cross-functional teams to strengthen enterprise security posture.