Cyber Ops Lead I SOC Lead

• Role - Cyber Ops Lead I SOC Lead
• Experience Required -7+ Years
• Must Have Technical/Functional Skills
• Experience in a regulated industry (healthcare, financial services, or similar) handling
• sensitive data.
• Relevant certifications such as GCIH, GCIA, Security+, CySA+, or equivalent.
• Familiarity with cloud environments (AWSlAzure) and common cloud security tooling.
• Prior experience building or refining SOC playbooks, runbooks, or standard operating procedures.
• SOC case queue is triaged consistently with clear ownership and no unexplained aging
• Escalation paths to Tech Operations are documented and running smoothly, with fewer dropped handoffs.
• Analyst team has clear expectations, regular feedback, and improving case quality.
• Director, Cyber Defense & Strategy has reliable visibility into SOC health through regular reporting
• Roles & Responsibilities
• Case & Queue Management
• Own the SOC case queue: triage incoming alerts, tickets, and requests; assign priority and
• ownership; track cases through to resolution.
• Maintain SLAs for case handling and escalation; identify and clear bottlenecks before they
• become backlogs.
• Ensure consistent documentation, categorization, and closure quality across all cases.
• SOC Leadership & Operations
• Lead day-to-day SOC operations, including monitoring, alert triage, and initial incident
• Coordinate shift coverage and on-call rotations to maintain continuous monitoring.
• Serve as a senior escalation point for analysts on complex or ambiguous cases.
• Drive continuous improvement Of detection content, playbooks, and standard operating

None flagged.