SOC Team Lead: AI-Driven Security Operations

AHEAD; United States; Remote; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) Plan

Paid Holidays

Paid Time Off

Parental Leave

Caregiver Leave

Job summary

AHEAD is seeking an experienced SOC Team Lead to run the Security Operations Center during their shift in a 24x7 follow-the-sun model. You will ensure continuous monitoring, manage the queue, and serve as the primary quality checkpoint for investigations and client communications.

The ideal candidate has 5–8 years in security operations, hands-on SIEM/EDR/SOAR experience, and a track record in leadership and coaching.

Qualifications

• 5–8 years of experience in security operations or incident response.
• Experience as a shift lead, team lead, or mentorship role preferred.
• Certifications such as GIAC, CompTIA CySA+, CISSP, CISM, Microsoft SC-200, or Palo Alto XSIAM/Cortex preferred.
• Hands-on experience with SIEM, EDR/XDR, SOAR, and related security tech.

Responsibilities

• Own SOC operations for the assigned shift in a 24x7 follow-the-sun model.
• Manage alert and case queue, prioritize high-severity events, ensure timely movement of cases.
• Serve as primary quality-check for cases before escalation or client notification.
• Act as first escalation point, provide technical guidance on investigations.
• Coordinate incident response activities and client communications during incidents.
• Oversee human-in-the-loop layer over AI-assisted triage and tuning.
• Coach Tier 1/2 analysts and support skills development.
• Monitor shift performance against MTTD, MTTR, SLA, and false positives.

Skills

Leadership

Decision making

Communication

Quality standards

Prioritization

Shift-based schedule

Continuous improvement

Education

Bachelor’s degree in Cybersecurity or related field

Tools

SIEM (Elastic Security)

EDR/XDR

SOAR

Cortex XSIAM

Job description

AHEAD is seeking an experienced SOC Team Lead to run the Security Operations Center during their shift in a 24x7 follow-the-sun model. You will ensure continuous monitoring, manage the queue, and serve as the primary quality checkpoint for investigations and client communications.

The ideal candidate has 5–8 years in security operations, hands-on SIEM/EDR/SOAR experience, and a track record in leadership and coaching.