SOC Shift Lead - Information Security

Elevance Health (Anthem); Atlanta (GA); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Elevance Health (Anthem) is seeking a SOC Shift Lead to manage security event investigations and incident response. You will mentor junior analysts, coordinate shift coverage, and contribute to SOC playbooks and procedures.

The role emphasizes leadership in security operations, complex problem resolution, and collaboration across IT and business teams within a hybrid work model.

Qualifications

• Requires a bachelor's degree or equivalent combination of education and experience.
• Experience in security operations, incident response, and risk management preferred.
• Strong knowledge of information security technology areas and governance.

Responsibilities

• Serve as escalation point for junior analysts during security investigations and incidents.
• Mentor analysts to improve investigation quality and operational consistency.
• Coordinate shift activities and assist with PTO planning and on-call scheduling.
• Develop and maintain SOC procedures, playbooks, and documentation.
• Lead complex security changes and capacity planning; support vendor relations.

Skills

SOC operations

Incident response

Mentoring

Change management

Education

Bachelor's degree

Tools

Windows

Cloud platforms

Job description

Anticipated End Date:

2026-09-30

Position Title:

SOC Shift Lead - Information Security

Job Description:

Security Analyst Sr (SOC Shift Lead - Information Security)

Cyber Security Threat Management

Schedule :

8-4 EST

Location:

Preference for Indianapolis, IN but alternate locations may be considered if candidates reside within a commuting distance from an office

Hybrid 1:

This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Alternate locations may be considered if candidates reside within a commuting distance from an office.

Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law.

The Security Analyst Sr. is responsible for managing the delivery of information and network security systems and/or technology services, which may include server, desktop, software, network, database, helpdesk components.

How you will make an impact:

• Serves as an escalation point for junior analysts during security event investigations and incident response activities.
• Mentor and provide guidance to junior analysts to improve investigation quality and operational consistency.
• Coordinate analyst shift activities and assist with maintaining operational coverage schedules, including on-call coordination and PTO planning.
• Assist with development and maintenance of SOC procedures, playbooks, and operational documentation.
• Provides trouble resolution on complex problems and leads implementations for system and network security technologies; develops testing plans to ensure quality of implementation.
• Coordinates and prepares the reporting of data security events and incidents; provides system and network architecture support for information and network security technologies.
• Provides technical support to business and technology associates in risk assessments and implementation of appropriate information security procedures, standards and technologies.
• Represents major upgrades and reconfigurations in change control.
• Design & analyse mix of vendor services meeting business and information security requirements; maintains relationship with key vendors.
• Leads lights on initiatives to consolidate equipment and/or implement business relocations.
• Determine and perform complex configuration changes to meet business and information security requirements.
• Perform capacity analysis; recommend and implement capacity increases.
• Serve as the technical escalation for results of preventative maintenance routines; supervise preventative maintenance; represents infrastructure security support in significant projects and performs the most complex operations and administration tasks.
• Respond to level 3 & 4 change and problem requests without supervision.
• Lead level 1 & 2 incident recoveries and root cause analysis.

Minimum Requirements:

• Requires a bachelor's degree or equivalent combination of education and experience that would provide the knowledge to perform such work.
• Experience must include a minimum of 3 years experience in a support & operations or design & engineering role in any of the following areas: access management or network security technologies, servers, networks, Network communications, telecommunications, operating systems, middleware, disaster recovery, collaboration technologies, hardware/software support or other infrastructure services role; or any combination of education and experience, which would provide an equivalent background.
• Requires experience providing top-tier support for 3 or more of the information security technology areas: 1) Access Control, 2) Application Security, 3) Business Continuity and Disaster Recovery Planning, 4) Cryptography, 5) Information Security and Risk Management 6) Legal, Regulations, 7) Compliance and Investigations, 8) Operations Security, 9) Physical (Environmental) Security, 10) Security Architecture and Design, 11) Telecommunications and Network Security.

Preferred Skills, Capabilities, and Experiences:

• Technical security certifications (e.g. Systems Security Certified Practitioner) strongly preferred. Such as: GCIH, GCIA, CompTIA CySA+, BTL2
• Experience responding to incidents associated with financially-motivated and APT threat actors
• Strong foundational knowledge of Windows and Cloud Forensics
• BA/BS degree in Information System and Computer Science or related field of study strongly preferred.
• Experience working in a Security Operations Center (SOC) environment with incident monitoring, triage, and escalation responsibilities preferred.
• Experience serving as a technical lead, shift lead, or escalation resource for security operations teams preferred.

Familia