Senior SOC Lead — Incident Response & Threat Hunting

ASM Global LLC.; Legends (SC); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

Paid vacation

401k plan

Job summary

Legends Global is seeking a Security Operations Lead in a Hybrid role, located at Dallas/Frisco, TX or Conshohocken, PA. You will guide complex incidents, tune detections, and advance enterprise detection, while mentoring SOC analysts and shaping playbooks.

The role reports to the VP, Cyber Security within Technology, offering a comprehensive benefits package and opportunities to influence security strategy across a global venue network.

Qualifications

• Three to five years of experience in Security Operations, Detection and Response, or Incident Handling; SOC experience required.
• Hands-on experience with SIEMs like Google Security Operations, Microsoft Sentinel, or QRadar; EDR like CrowdStrike, Microsoft Defender, or SentinelOne; and SOAR platforms.
• Proficiency in scripting for automation, enrichment, and data analysis; strong executive-ready incident summaries.

Responsibilities

• Independently lead complex or high-impact security incidents and improve SOC processes, tools, and response capabilities.
• Provide technical guidance and mentorship to SOC Analysts; establish standards for documentation and delivery.
• Build and operationalize SOC playbooks and escalation workflows; lead alert triage and false-positive suppression.

Skills

Python scripting

PowerShell scripting

Bash scripting

Written communication

Incident handling

Threat detection

Tools

Google Security Operations

Microsoft Sentinel

IBM QRadar

CrowdStrike

Microsoft Defender

SentinelOne

SOAR platforms

Job description

Legends Global is seeking a Security Operations Lead in a Hybrid role, located at Dallas/Frisco, TX or Conshohocken, PA. You will guide complex incidents, tune detections, and advance enterprise detection, while mentoring SOC analysts and shaping playbooks.

The role reports to the VP, Cyber Security within Technology, offering a comprehensive benefits package and opportunities to influence security strategy across a global venue network.