SOC Lead

Diligent Tec, Inc; San Jose (CA); On-site; USD 100,000 - 130,000; Full time

Job summary

A cybersecurity firm based in San Jose, CA is seeking a SOC Lead to monitor security alerts and respond to incidents. The role requires 5-10 years of relevant experience and proficiency with various security tools such as SIEM and EDR. This position involves analyzing security events, maintaining incident logs, and collaborating with IT teams to resolve vulnerabilities. The ability to generate reports on security activities is also essential. Competitive salary and dynamic work environment offered.

Qualifications

• 5-10 years of relevant experience in security operations.
• Ability to detect and respond to incidents efficiently.
• Experience in working with various security tools.

Responsibilities

• Monitor security alerts from various security tools.
• Detect potential security incidents such as unauthorized access.
• Review and analyze security event logs and alerts.

Skills

Experience with SIEM tools

Knowledge of DLP systems

Familiarity with EDR systems

Proficient in incident handling

Strong analytical skills

Job description

Overview

Job Title: SOC Lead

Location: San Jose, CA

SOCLead engineer based out of our San Jose, below is the JD for the same - we need a person with around 5-10years of relevant experience

Responsibilities

• Monitor security alerts from various security tools (SIEM, DLP, EDR, IDS/IPS, firewalls, etc.).
• Detect potential security incidents such as unauthorized access, malware activity, and abnormal behavior.
• Review and analyze security event logs and alerts to identify security threats.
• Triage the incidents to determine their severity and impact.
• Follow defined workflows and playbooks to respond to security incidents.
• Maintain and update incident logs and tracking systems across SIEM and ITSM.
• Escalate unresolved / complex incidents that require further investigation or specialized skills to L2 / Incident response teams.
• Collaborate with client’s other IT teams (e.g., network, systems, and application teams) to resolve security issues.
• Assist with the identification of security vulnerabilities in systems, networks, and applications. Perform vulnerability scanning through tools. Assist with the closing of vulnerabilities.
• Monitor the health and status of security systems, including firewalls, anti-virus software, and endpoint protection.
• Generate daily, weekly, or monthly reports on security incidents and activities for senior management. Document security incidents and actions taken in accordance with incident response policies.