SOC Lead: Cyber Defense & Incident Response

SFE; Draper (UT); On-site; USD 108,000 - 132,000; Full time

Job summary

SFE is seeking a Cyber Ops Lead I SOC Lead in Draper, UT for a full-time role. You will lead day-to-day SOC operations, triage alerts, manage case queues, and coordinate incident response efforts.

You will mentor analysts, ensure SLAs, and drive improvements in playbooks and SOPs to strengthen security posture. The position requires 5+ years in a SOC, strong SIEM/EDR experience, and willingness to work on-site in Draper.

Qualifications

• 5+ years in a Security Operations Center or similar cyber defense role, including lead/senior capacity.
• Demonstrated experience managing case/ticket queues and driving them to resolution in a fast-paced environment.
• Working knowledge of SIEM, EDR, and case/ticket management tooling.
• Solid understanding of incident response fundamentals (triage, containment, escalation).
• Willingness to work on-site in Draper, UT, including on-call/shift coverage as needed.

Responsibilities

• Own the SOC case queue: triage alerts and tickets; assign priority and track through to resolution.
• Maintain SLAs for case handling and escalation; identify bottlenecks to prevent backlogs.
• Ensure consistent documentation, categorization, and closure quality across all cases.
• Lead day-to-day SOC operations: monitoring, alert triage, and initial incident response.
• Coordinate shift coverage and on-call rotations for continuous monitoring.
• Serve as a senior escalation point for analysts on complex cases.
• Drive continuous improvement of detection content, playbooks, and SOPs.
• Act as liaison between Cyber Defense and Tech Operations for cross-team issues.
• Support incident response efforts, including initial triage and containment recommendations.
• Mentor SOC analysts and support onboarding and skills development.
• Track and report SOC metrics to the Director and flag trends for improvements.

Skills

SOC leadership

Case queue management

Incident response

SIEM/EDR familiarity

Cross-functional collaboration

Communication

On-site work in Draper

Tools

SIEM

EDR

Case management tooling

Job description

SFE is seeking a Cyber Ops Lead I SOC Lead in Draper, UT for a full-time role. You will lead day-to-day SOC operations, triage alerts, manage case queues, and coordinate incident response efforts.

You will mentor analysts, ensure SLAs, and drive improvements in playbooks and SOPs to strengthen security posture. The position requires 5+ years in a SOC, strong SIEM/EDR experience, and willingness to work on-site in Draper.