SOC Lead: Incident Command, Threat Detection & Automation

Qnity; Chestnut (AL); On-site; USD 120,000 - 170,000; Full time

Job summary

Qnity is seeking a senior Security Operations Center (SOC) leader to drive incident response, threat detection, and security monitoring across advanced electronics and high-tech operations. You will mentor analysts, coordinate MSSP partnerships, and refine SIEM content with MITRE ATT&CK-aligned use cases.

The role emphasizes hands-on leadership, automation via SOAR, and building measurable security outcomes in a fast-paced environment.

Qualifications

• 6+ years in Security Operations, Incident Response, Threat Detection, or related roles.
• 3+ years leading SOC or incident response teams.
• Proven track record handling complex cybersecurity incidents.
• Hands-on experience with Microsoft Sentinel and Defender for Endpoint.
• Experience managing security vendors and MSSPs.
• Strong project management and communication skills.

Responsibilities

• Lead investigation, containment, and resolution of cybersecurity incidents as Incident Commander.
• Oversee day-to-day SOC operations and MSSP performance.
• Develop and tune threat detection use cases and SIEM rules (MITRE ATT&CK aligned).
• Drive automation initiatives through SOAR to boost efficiency.
• Lead threat hunting, forensics, and root cause analysis.
• Establish and report SOC metrics (MTTD, MTTR, coverage, trends).

Skills

Security Operations

Incident Response

Threat Detection

SOC Leadership

Vendor Management

SOAR Automation

MITRE ATT&CK

KQL / Kusto Query Language

Tools

Microsoft Sentinel

Microsoft Defender for Endpoint

Job description

Qnity is seeking a senior Security Operations Center (SOC) leader to drive incident response, threat detection, and security monitoring across advanced electronics and high-tech operations. You will mentor analysts, coordinate MSSP partnerships, and refine SIEM content with MITRE ATT&CK-aligned use cases.

The role emphasizes hands-on leadership, automation via SOAR, and building measurable security outcomes in a fast-paced environment.