SOC Lead

SOC Lead

SOC Lead

Lead and govern a 24x7 enterprise SOC delivered via MSSP, ensuring effective monitoring, incident response, service quality, and continuous improvement. Act as the single point of control between internal teams and the managed SOC provider.

Years of experience required: 7 - 10 yrs.

Key Areas:

1. SOC Operations
• 24x7 monitoring oversight, alert triage & closure
• Incident lifecycle management
• Analyst performance & shift quality
2. MSSP Governance
• SLA / KPI / OLA management
• Vendor performance & service reviews
• RACI enforcement & risk escalation
3. SIEM & Detection (Splunk preferred)
• Log onboarding & coverage
• Use-case development & tuning
• Alert optimization & reporting dashboards
4. Incident Response
• Major incident coordination
• Playbooks enforcement
• RCA, lessons learned & regulatory reporting
• Table Top exercises
5. Threat Detection & Hunting
• Use-case improvement & threat hunting
• MITRE ATT&CK alignment
• Detection gap identification
6. SOC Implementation / Transition
• SOC setup / MSSP transition
• Tool integration & workflow design
• Knowledge transfer & runbooks
7. Reporting & Stakeholder Management
• SOC metrics & executive reporting
• Risk visibility & trend analysis
• Leadership communication & audit support

Certification:

SIEM Vendor specific certifications,[Splunk ]
ISC2 CISSP
ISACA CISM
SANS Institute SEC450 / SEC555 (SOC Management & SIEM)
SOC Manager