Security Operations Lead
Tasks
- Build playbooks and automation pipelines
- Conduct incident forensics support
- Coordinate escalation handling and on call rotations
- Develop SIEM correlation rules
- Develop detection engineering and monitoring logic
- Drive Threat Hunting
- Integrate and validate log sources
- Integrate new data sources into SOC detection pipelines
- Lead day-to-day SOC operations
- Lead incident response lifecycle
- Lead threat intelligence intake
- Mentor SOC analysts
- Oversee SIEM dashboarding and alert tuning
- Oversee threat intelligence integration into detections
- Perform packet analysis for investigations
- Provide daily situational reporting
- Refine SOPs workflows and response playbooks
- Triage security alerts
Perks/Benefits
- N/A
Skills/Tech-stack
AWS Security | AWS security monitoring | Alert Tuning | Automation | Azure Security | Azure Security Monitoring | Correlation rules | Detection and Response | Detection engineering | Detection pipelines | Elastic Stack | Endpoint Detection and Response | Endpoint detection | Event management | ExtraHop | Forensics | Google Cloud | Google Cloud Platform | Google Cloud Platform Security Monitoring | Google Cloud Platform security | Incident Response | Log Management | Network detection | Network detection and response | Packet Analysis | SIEM Correlation Rules | SIEM correlation | SOAR | Security Information | Security Information and Event | Security Information and Event Management | Security monitoring | Splunk | Threat Intelligence | Threat hunting | Trellix
Education
N/A
Roles
Lead | Operations Lead | SOC Lead | Security | Security Operations Lead
Regions
Countries
States
Related jobs
-
Technology Operations Enablement Lead USD 135K-216KAWS | Access Control | Access Management | Automation | AzureHybrid work | Limited travel | On-call supportSenior-level Full TimeMiami Lakes, FL, United States8h ago
-
Security Operations Center (SOC) Analyst USD 82K-106KAccess Management | Alert triage | Cloud Security | Detection engineering | EDR401k matching | Bereavement leave | Dental insurance | Disability insurance | Employee assistance programMid-level Full TimeSt. Louis, MO, United States8h ago
-
Security Solutions Senior Consultant – CyberArk USD 126K-158KActive Directory | CIS | CPM | Cloud access | Conjur401k plan with company matching | Employee assistance program | Health, dental, and vision care | Holidays | Life and disability insuranceSenior-level Full TimeRemote - Nationwide, United States R8h ago
-
Security Analyst (Remote) USD 80K-109KAccess Control | Access Management | Bash | CSRF | Cross-Site ScriptingRemote workMid-level Full TimeDallas, TX, US R8h ago
-
Staff Security Engineer USD 128K-214K800-53 | 802.1x | Assessment and Authorization | Authority to Operate | ContainerizationSenior-level Full TimeUSA-VA-Chantilly12h ago
-
800-53 | API Ecosystem | Alerting | Attack detection | Audit toolingSenior-level Full TimeNew York, NY, USA; Cambridge, MA, …14h ago
-
Access Control | Alarm response | Crisis management | Customer Service | Emergency Notification401k options | Dental insurance | Disability insurance | Employee assistance program | Employer provided retirement planMid-level Full TimeSeattle, WA, United States23h ago
-
Security Analyst II USD 78K-90KAccess Governance | Access Management | Alert Tuning | CSF 2.0 | Conditional AccessContinuing professional education | Employee development | Paid time off | Volunteer time offMid-level Full TimeSt Cloud, MN, US1d ago
-
Security Analyst II USD 78K-90KAccess Governance | Access Management | CSF 2.0 | Change Control | Compliance Support401k plan | Continuing education | Dental insurance | Health insurance | Life insuranceMid-level Full TimePlymouth, MN, US1d ago
-
Security Analyst II USD 78K-90KAccess Governance | CSF 2.0 | Change Control | Conditional Access | Configuration Management401k plan | Continuing education | Dental insurance | Health insurance | Life insuranceMid-level Full TimeWest Des Moines, IA, US1d ago
-
Cybersecurity Senior Engineer (ASM) USD 100K-142KAWS | Attack Simulation | Attack surface | Attack surface management | Azure401k | Dental insurance | Disability insurance | Health insurance | Life insuranceSenior-level Full TimeCharlotte NC - 214 North Tryon …1d ago
-
Senior Security Operations Center (SOC) Analyst USD 127K-160KAlert triage | Bash | Cloud Security | DLP | Data Normalization401k match | Dental insurance | Disability insurance | Flexible paid time off | Health insuranceSenior-level Full TimeUS NJ Remote, United States R1d ago
-
Global Security Operations Center Specialist USD 77K-97KAccess Control | Alarm Monitoring | Burglar Alarm | Burglar Alarm Monitoring | CADEntry-level Full TimeMI - Zeeland Mainsite Computer Center, …1d ago
-
AI | Databricks | Digital forensics | EDR | Firewall401k | Education stipends | Healthcare | Hybrid work options | Night shift scheduleSenior-level Full TimeUS - United States of America1d ago
-
Virtru Security Engineer USD 99K-225KAnsible | CI/CD | Cloud Security | Data Classification | Data TaggingDependent care | Paid leave | Professional development | Tuition assistance | Work-life programsMid-level Full TimeUSA, MD, Fort Meade (6910 Cooper …1d ago
-
Security Operations Center Analyst USD 69K-158KCyber Threat | Cyber Threat Intelligence | DNS | Endpoints | Event triageMid-level Full TimeUSA, DC, Washington (400 Virginia Ave …1d ago
-
Security Operations Center Analyst, Mid USD 69K-158KCyber Threat | Cyber Threat Intelligence | DNS | Event triage | FirewallsDependent care | Paid leave | Professional development | Tuition assistance | Work-life programsMid-level Full TimeUSA, DC, Washington (400 7th St …1d ago
-
Product Security Principal USD 123KAPI Security | AWS | Access Management | Authentication | AuthorizationSenior-level Full TimeNew York/1400 Broadway/114025, United States1d ago
-
Analyst I, Falcon Complete (Remote) USD 85K-120K.NET | C Sharp | C# | Computer Security | Computer forensicsEmployee networks | Hybrid work schedule | Paid adoption leave | Paid parental leave | Professional development opportunitiesSenior-level Full TimeUSA TX Remote, United States R1d ago
-
ABAC | AWS | Adaptive Authentication | Audit Logging | Auth0401k match | Employee stock program | Financial support | Foundation donation matching | Health, dental, vision benefitsSenior-level Full TimeUS-United States-Virtual, United States R1d ago
-
Security Automated Response Engineer USD 86K-198KAPI Integration | Artificial Intelligence | Automated response | Integration development | Playbook DevelopmentDependent care | Paid leave | Professional development | Tuition assistance | Work-life programsMid-level Full TimeUSA, MD, Fort Meade (6910 Cooper …1d ago
-
Security Administrator USD 95K-120KAccess Management | Active Directory | Aruba | Authentication | EDR401k company match | Career path | Life insurance | Long-term disability insurance | Medical/Dental/Vision insuranceSenior-level Full TimeSt. Louis Park, Minnesota, United States1d ago
-
Security Engineer (Security Operations) USD 159K-201KAWS | AWS Config | Ansible | Datadog | ELKLearning and development stipend | Paid sick leave | Professional development opportunitiesSenior-level Full TimeOakland, California, United States1d ago
-
Security Engineer USD 150K-225KAV | Access Control | Application Security | Data Normalization | EDRSenior-level Full TimeIssaquah, WA, US1d ago
-
Information Security Engineer USD 90K-110KCrowdStrike | DHCP | DNS | Delinea | EDR401k plan | Career development workshops | Dental insurance | Health insurance | Learning opportunitiesMid-level Full TimeRocklin, CA, United States1d ago