Job descriptionEstablish goals and priorities by working closely with your team to identify the most critical focus areas. These include :Improving incident response timesReducing false positives and other extraneous alertsEnhancing threat detection capabilitiesOversee your staff's activities and ensure they focus on the right prioritiesOversee SOC activities by reviewing your team's performance metrics, incident reports and other key indicatorsLead incident response efforts when a security incident occurs, the SOC team has to respond as quickly as possibleLead these efforts by establishing clear incident response procedures and protocols and conveying them to the teamAnalyse incident reports to understand your organization's security posture by reviewing incident reports, SOC managers identify patterns and trends that may indicate weaknesses or vulnerabilities in their security defencesServe as the point of contact (POC) for security incidents within the company. You are the primary liaison between the SOC team, other internal stakeholders, and external parties such as vendors, clients or regulatory bodies.Be responsible for conducting information security investigations as a result of security incidents. These are previously identified by the Level 2 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone) End to end security incident management. You will play a key role in providing the highest level of technical expertise and handling the most complex security incidents.Report to the Customer about security operations. This means that you must keep the CISO and Head of security operations informed about everything that’s happening in the operations centre. You can do this by preparing clear and concise reports that highlight key findings, and recommendations about the operations. Your reports will help the customer make informed decisions about security investments and strategies that align with the company's goals.