SOC Lead

Ensign is hiring !

Key Responsibilities:

• Manage day-to-day SOC operations, including monitoring, detection, investigation, and response to security incidents.

• Lead and mentor a team of SOC Analysts (L1–L3), Threat Hunters, and Incident Responders.

• Define and implement SOC processes, escalation procedures, and service level objectives (SLOs).

• Maintain and continuously improve SIEM, SOAR, and other SOC-related technologies.

• Develop and track KPIs and metrics to measure SOC performance and effectiveness.

• Coordinate incident response activities and ensure post-incident reviews and reporting are conducted.

• Collaborate with IT, network, and application teams to ensure comprehensive log collection and telemetry.

• Stay current with emerging threats, vulnerabilities, and technologies to proactively adjust SOC strategies.

• Lead threat intelligence integration and use-case development.
   

Requirements:

Education & Certification:

• Bachelor's or Master’s degree in Cybersecurity, Information Technology, Computer Science, or related field.

• Relevant certifications preferred: CISSP, CISM, GIAC (e.g., GCIA, GCIH, GMON), or equivalent.
   

Technical Skills:

• Strong knowledge of security monitoring tools (e.g., SIEM, SOAR), endpoint security, firewalls, IDS/IPS, and threat intelligence platforms.