SOC Tech Lead - Onsite, Huntsville, Detection & Leadership

MAD Security, LLC; Huntsville (AL); Vor Ort; USD 140.000 - 200.000; Vollzeit

Zusammenfassung

MAD Security, LLC's Security Operations team in Huntsville, Alabama seeks a SOC Technical Lead to own the 24/7 SOC platform, detection content, and incident command. You lead Tier 3 analysts and coordinate with the SOC Desk Manager, ensuring Elastic Security tuning for client delivery.

You drive engineering projects end-to-end, write technical standards, and serve as incident commander for critical incidents with a focus on security architecture and scalable operations.

Qualifikationen

• Minimum eight years in information security and/or IT with significant SOC experience.
• Experience as incident commander on declared incidents or as backup to one.
• Experience operating a SIEM platform at scale across multiple clients or business units.

Aufgaben

• Own the SOC platform and its integrations, including stability, performance at scale, and change approval.
• Own the detection content standard and rule review standard; maintain validated detection coverage.
• Write and publish SOC technical standards; approve architecture and platform changes and deviations.
• Serve as incident commander on declared incidents, or as backup to the team member who does, including scoping, containment decisions, and evidence handling.
• Own the outcome of engineering projects, platform stability, and tool integration.
• Own technical testing (penetration testing) execution, reporting, and project management: scope and schedule engagements, manage them to a quality standard, and present findings and remediation to clients.
• Lead, coach, and develop the Tier 3 analysts, and ensure each understands the Tier 2 and Tier 1 roles their work supports.
• Own detection engineering, and engineer AI-assisted triage and response with human oversight on critical decisions.
• Communicate with technical, executive, and client audiences during and after incidents.

Kenntnisse

Detection engineering

Incident response

Threat hunting

Platform administration

Security architecture

Incident commander

Team leadership

Ausbildung

Bachelor's degree in Information Technology, Information Security, Computer Science, or equivalent experience

Tools

Elastic Security

SIEM platforms

Elastic Cloud Gov

Microsoft Sentinel

OpenText NDR

Fortinet

Avanan

Jobbeschreibung

MAD Security, LLC's Security Operations team in Huntsville, Alabama seeks a SOC Technical Lead to own the 24/7 SOC platform, detection content, and incident command. You lead Tier 3 analysts and coordinate with the SOC Desk Manager, ensuring Elastic Security tuning for client delivery.

You drive engineering projects end-to-end, write technical standards, and serve as incident commander for critical incidents with a focus on security architecture and scalable operations.