Senior SOC Lead: Incident Response & Detection

Qubika; United States; Remote; USD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible work hours

Language lessons

Travel opportunities

Mentorship by senior team

Job summary

Qubika is seeking a Lead Security Operations professional to guide the SOC, detection engineering, threat intelligence, and incident response while staying hands-on with shifts and incident handling.

You will lead on-call scheduling, alert triage, detection rule tuning, and playbook improvements, mentoring analysts, and reporting key SOC metrics. Join a senior team delivering secure software for disruptive startups and enterprises.

Qualifications

• 8+ years in security operations with at least 2 years in a lead role.
• Proven hands-on experience with Microsoft Sentinel and Defender suite.
• Solid experience writing and tuning detection rules in KQL.
• Deep understanding of incident response lifecycle and leading IR on real incidents.

Responsibilities

• Own and manage the SOC rotating on-call schedule for 24/7 coverage.
• Triage and respond to security alerts, taking shifts and handling incidents with the team.
• Design, write, tune, and deprecate detection rules across SIEM and telemetry sources.
• Lead reduction of alert fatigue through systematic false-positive analysis.
• Oversee threat intelligence collection and ensure it informs detection rules and IR playbooks.
• Lead incident response operations: triage, containment, eradication, recovery, post-incident review.
• Act as technical lead on high-severity incidents coordinating across teams and clients.
• Mentor SOC analysts and detection engineers.
• Track and report SOC KPIs: MTTD, MTTR, false positives, escalation rate.

Skills

SOC leadership

Incident response

KQL

Threat intelligence

Cloud security

AI in security

English proficiency

Tools

Microsoft Sentinel

Microsoft Defender suite

SOAR

Job description

Qubika is seeking a Lead Security Operations professional to guide the SOC, detection engineering, threat intelligence, and incident response while staying hands-on with shifts and incident handling.

You will lead on-call scheduling, alert triage, detection rule tuning, and playbook improvements, mentoring analysts, and reporting key SOC metrics. Join a senior team delivering secure software for disruptive startups and enterprises.