Senior SOC Lead: Threat Detection & Incident Response

RB Global Inc.; Westchester (IL); On-site; USD 140,000 - 190,000; Full time

Job summary

RB Global Inc. is seeking a Lead, Cybersecurity Operations to drive the growth of our global CSOC capabilities.

The role combines hands-on technical leadership with strategic vision, overseeing threat detection, incident response, and continuous improvement of security operations across the organization. The Lead will serve as the primary escalation point for analysts, translate leadership direction into actionable tasks, and partner with security teams to enhance detection maturity and

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or equivalent practical experience.
• Security+ or GCIA/GCED equivalents.
• 5–8+ years in cybersecurity operations or SOC environments.

Responsibilities

• Oversee day-to-day security monitoring, detection, and response activities, ensuring high‑quality investigations and timely remediation of security events and incidents.
• Act as the go‑to escalation resource for analysts, providing hands‑on guidance for complex investigations and ensuring depth in investigative outcomes.
• Lead and coordinate complex security incidents end‑to‑end, acting as liaison between leadership and the SOC—translating strategic direction into actionable tasks and updates.
• Lead SIEM‑driven operations and continuously improve detection capabilities through use‑case development, telemetry optimization, and enhanced coverage.
• Break down strategic cybersecurity objectives into actionable workstreams, track progress, remove blockers, and ensure successful execution of team initiatives.
• Create and refine incident response playbooks, SOPs, and automation opportunities to improve consistency, efficiency, and scalability of operations.
• Track key operational metrics (MTTD, MTTR, alert fidelity) and conduct advanced threat analysis to inform decisions and strengthen defenses.

Skills

Threat detection

Incident response leadership

SIEM operations

Team leadership

Operational excellence

Education

Bachelor's degree in CS/IT/Cybersecurity

Security+ or GCIA/GCED equivalents

Tools

SIEM platforms

EDR

NDR

Email security

WAF

Job description

RB Global Inc. is seeking a Lead, Cybersecurity Operations to drive the growth of our global CSOC capabilities.

The role combines hands-on technical leadership with strategic vision, overseeing threat detection, incident response, and continuous improvement of security operations across the organization. The Lead will serve as the primary escalation point for analysts, translate leadership direction into actionable tasks, and partner with security teams to enhance detection maturity and