Art Technology and Software - Security Operations Center Lead

Description :

The SOC Lead serves as a senior member of the Monitoring and Threat Detection function. This role focuses on high-quality incident triage, technical escalation management, continuous improvement of detection capabilities, and leading incident analysis across enterprise-wide environments. The SOC Lead mentors L1 / L2 analysts, ensures SLA compliance, and drives process innovation within the SOC.

Key Responsibilities :

• Lead deeper security investigations (L2 / L3) and advanced triage of escalated alerts across SIEM, EDR, and email security platforms.
• Collaborate with Threat Detection, Incident Response, and Threat Hunting teams to validate and escalate potential threats.
• Oversee quality assurance of security tickets and ensure accurate root cause and kill chain identification.
• Manage the design and optimization of detection rules, threat correlation logic, and playbooks within SIEM / SOAR tools.
• Provide subject matter expertise in high-severity incident response and containment, ensuring coordinated communication with clients and internal stakeholders.
• Conduct and support Purple Team simulations and threat validation exercises to assess detection efficacy.
• Mentor and guide SOC analysts, fostering technical growth and enforcing operational discipline.
• Coordinate with enterprise teams on email and cloud security incidents, leading Proofpoint and Microsoft 365 Defender investigations.
• Define and maintain documentation including incident response procedures, triage guides, and detection playbooks.
• Contribute to automation initiatives to reduce repetitive manual work and improve response efficiency.

Additional Responsibilities :

Core Skills And Experience :

(Windows / Linux), and web applications.

Leadership and Delivery :

Desired Certifications :

Additional Attributes :

(ref : hirist.tech)