Job Description

Job Summary

This role oversees security operations for large-scale environments, ensuring robust event analysis and technical implementation of SIEM and SOAR solutions. The position drives operational excellence, advances process innovation, and empowers teams to deliver high-quality, client-focused security outcomes. They act as a subject matter expert, optimizing incident response frameworks and aligning security operations with organizational objectives.

Key Responsibilities

1. Lead security event analysis using SIEM platforms and SOAR tools, ensuring expert detection, investigation, and response to advanced threats across complex infrastructures.
2. Architect and implement SIEM-based technical solutions, integrating threat intelligence and automation to optimize security operations and incident management.
3. Oversee and refine SOC operational processes by leveraging advanced SOC analyst skills and SIEM technologies, driving continuous improvement and process innovation.
4. Mentor and guide SOC analysts in using SIEM and SOAR technologies, fostering skill development and ensuring high-quality incident response and reporting.
5. Engage with clients to interpret security requirements, translating them into actionable SIEM configurations and operational strategies that exceed service level agreements.
6. Drive the adoption of new security technologies and methodologies, advancing the SOC’s capabilities in proactive threat detection and mitigation.

Skill Requirements

1. Excellent Knowledge Of Security Event Analysis, Incident Response, And Threat Intelligence Integration.
2. Advanced Skills In Soar Platforms For Security Automation And Orchestration.
3. Strong Capability In Designing, Optimizing, And Leading Soc Operations For LargeScale Or Complex Environments.
4. Expert Understanding Of Security Frameworks, Compliance Standards, And Best Practices In Operational Security.

Other Requirements

1. Recommended: Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), or SIEM vendorspecific expert certification (e.g., Splunk Certified Architect)