SOC Lead

Teladoc Health; United States; Remote; USD 120,000 - 170,000; Full time

Job summary

Teladoc Health is hiring a Senior SOC Lead to oversee day-to-day SOC operations, guide analysts, and drive detection, response, and mitigation of cyber threats. You will manage security incidents, optimize SIEM systems, and help shape SOC strategy.

Ideal candidates have 5–8 years in cybersecurity, with 2–3 years in SOC leadership and hands-on SIEM and incident response experience. This role emphasizes collaboration with IT, security, and compliance teams.

Qualifications

• Bachelor’s degree required; Master’s degree or certifications preferred.
• Hands-on experience with SIEM platforms and incident response processes.
• Experience in SOC or MSSP environment is desirable.
• Strong knowledge of SIEM architecture, log management, and event correlation.

Responsibilities

• Operational Oversight: supervise daily SOC operations and 24/7 coverage.
• Incident Management: lead investigations and resolutions coordinating with analysts and external teams.
• SIEM Optimization: tune and maintain SIEM to improve detection and reduce false positives.
• Team Leadership: mentor analysts and engineers with technical direction.
• Threat Intelligence Utilization: integrate threat feeds to enhance rules and responses.
• Process Improvement: develop SOPs and playbooks for consistent operations.
• Reporting and Metrics: generate reports on incidents and SOC performance.
• Collaboration: work with network ops, cloud security, and compliance teams.
• Automation and Scripting: promote automation to streamline tasks.
• Escalation Point: primary escalation for high-severity incidents.
• Training and Development: facilitate training and certifications.

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field

SIEM platforms

Incident response

Log management

Event correlation

Python scripting

PowerShell scripting

Job description

Join the team leading the next evolution of virtual care.

At Teladoc Health, you are empowered to bring your true self to work while helping millions of people live their healthiest lives.

Here you will be part of a high-performance culture where colleagues embrace challenges, drive transformative solutions, and create opportunities for growth. Together, we’re transforming how better health happens.

Job Overview

The SOC Lead is a senior member of the Security Operations Center (SOC) team, responsible for overseeing day-to-day operations, guiding SOC analysts, and ensuring effective detection, response, and mitigation of cyber threats. This role involves managing security incidents, optimizing Security Information and Event Management (SIEM) systems, and contributing to the strategic direction of the SOC. The SOC Lead will act as a technical and operational leader, ensuring seamless coordination within the team and alignment with organizational security objectives.

Key Responsibilities

• Operational Oversight : Supervise daily SOC operations, including monitoring, incident detection, and response activities, ensuring 24/7 coverage and timely resolution of security alerts.
• Incident Management : Lead the investigation, triage, and resolution of security incidents, coordinating with analysts, SIEM engineers, and external teams as needed.
• SIEM Optimization : Oversee the configuration, tuning, and maintenance of SIEM platforms to enhance threat detection and reduce false positives.
• Team Leadership : Mentor and guide SOC analysts and engineers, providing technical direction, training, and performance feedback to improve team capabilities.
• Threat Intelligence Utilization : Integrate and leverage threat intelligence feeds to enhance detection rules, correlation logic, and incident response strategies.
• Process Improvement : Develop, refine, and implement SOC processes, playbooks, and standard operating procedures (SOPs) to ensure consistent and efficient operations.
• Reporting and Metrics : Generate and review reports on incident trends, SIEM performance, and SOC metrics, presenting findings to the SOC Manager and other stakeholders.
• Collaboration : Work closely with other IT and security teams, including network operations, cloud security, and compliance teams, to align SOC activities with organizational goals.
• Automation and Scripting : Promote and support the use of automation tools and scripts (e.g., Python, PowerShell) to streamline repetitive tasks and improve response times.
• Escalation Point : Serve as the primary escalation point for complex incidents, providing expertise and decision‑making during high‑severity events.
• Training and Development : Facilitate training sessions and knowledge‑sharing initiatives to upskill team members and promote certifications

Skills and Qualifications

• Education : Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field. A Master’s degree or relevant certifications are preferred.

• Experience :

  • 5‑8 years of experience in cybersecurity, with at least 2‑3 years in a SOC environment and 1‑2 years in a leadership or supervisory role.
  • Hands‑on experience with SIEM platforms and incident response processes.
  • Prior experience in a Security Operations Center or Managed Security Service Provider (MSSP) environment is highly desirable.

• Technical Skills :

  • Strong knowledge of SIEM architecture, log management, and event correlation.