SOC Team Lead

TəsvirWe’re on the lookout for a hands-on, strategic, and security-driven SOC Team Lead to head our Security Operations Center. This is a key leadership role responsible for driving 24/7 security monitoring, threat detection, and incident response capabilities.Proactively lead threat hunting initiatives, identifying hidden threats and adversary TTPs using SIEM, EDR, NDR, and other security technologies.Direct and conduct high-impact security investigations, including malware analysis, digital forensics, and network traffic analysis.Act as the primary escalation point for L1/L2 analysts, providing guidance, mentorship, and technical leadership.Leverage internal and external threat intelligence sources (e.g., MITRE ATT&CK) to map attacker behavior and anticipate emerging threats.Perform in-depth threat research and risk assessments to identify potential attack vectors and trends using analytical and data-mining techniques.Maintain up-to-date knowledge of evolving cyber threat landscapes, including TTPs, tools, and frameworks.Design and continuously refine detection rules, correlation logic, and SOAR automation playbooks to optimize SOC effectiveness.Drive improvements to SOC workflows and actively contribute to security architecture discussions and security infrastructure design.TələblərMinimum of 4 years of experience in a SOC or related cybersecurity role.Deep understanding of incident response methodologies and frameworks (e.g., NIST, MITRE ATT&CK).Hands-on experience with SIEM, EDR, NDR, and SOAR platforms.Strong understanding of Security Infrastructure Design and architecture best practices.Familiarity with security standards and compliance frameworks such as ISO 27001.Proficient in scripting (Python, PowerShell) for automation and task orchestration.Strong analytical and problem-solving skills with a detail-oriented mindset.Excellent communication skills and a collaborative approach to team-based security operations.