SOC Lead: 24/7 Incident Detection & Response

Optimalsemi; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Optimalsemi is seeking a seasoned SOC Lead to helm incident detection and security operations. You will drive 24x7 monitoring, triage escalated alerts, and lead a team through in-depth event analysis, containment, and root-cause investigations across on-prem and cloud environments.

Key qualifications include 8+ years in cybersecurity, 5+ years in incident response and leadership, and strong experience with SIEM, IDS/IPS, and Splunk.

Qualifications

• 8+ years cyber security experience.
• 5+ years of incident response handling and staff leadership.
• 2+yrs as a lead in security operations.
• Strong understanding of concepts and technology across IT to spot gaps and implement controls.
• Demonstrated analytical, problem-solving and critical thinking skills.
• Familiarity with AD, anti-malware, forensics, firewalls, IAM, IDS/IPS, SIEM, threat intel, vulnerability scanners, monitoring tools, web filters (on prem/cloud).
• Ability to work with little supervision and deliver results.
• Familiarity with network technologies and multiple domain environments.

Responsibilities

• Directs technical members in Event Detection, Incident Triage, Incident Handling, and Hunting activities.
• Continuously monitors service levels and prioritizes threats using cyber threat intelligence and security tools.
• Collaborates with Security and IT ops to implement remediation plans.
• Provides input into security architecture and tool deployment.
• Performs review of events to identify intrusions and compromises.
• Delivers briefings to operations and management on ongoing incidents.
• Ensures timely handling of all incidents across facility security.
• Leads 24x7 incident detection and monitoring with regular performance reports.
• Enhances and trains operation members.
• Integrates additional log sources and develops new use cases as required.
• Manages communications with affiliates during incidents and remediation.

Skills

Leadership

Incident response

Analytical thinking

Problem solving

Communication

Autonomy

Network awareness

Tools

Active Directory

Forensics tools

Firewalls

IDS/IPS

SIEM

Threat intelligence

Vulnerability scanners

Monitoring tools

Web filters

Splunk

Job description

Optimalsemi is seeking a seasoned SOC Lead to helm incident detection and security operations. You will drive 24x7 monitoring, triage escalated alerts, and lead a team through in-depth event analysis, containment, and root-cause investigations across on-prem and cloud environments.

Key qualifications include 8+ years in cybersecurity, 5+ years in incident response and leadership, and strong experience with SIEM, IDS/IPS, and Splunk.