Lead Security Engineer

Responsibilities:

1. - Manage SOC Operations: Oversee day-to-day Security Operations Center (SOC) activities, ensuring timely detection, analysis, and response to security incidents.

2. - Operational Insights: Provide continuous updates and operational insights to the head of security operations.

3. - Collaboration with Engineering Teams: Work closely with engineering teams to implement and maintain security technologies and tools for clients.

4. - Leadership and Guidance: Lead and provide effective guidance to a technical 24x7 SOC team, fostering a collaborative and high-performance work environment.

5. - Strategic Initiatives: Develop and execute strategic initiatives to enhance the SOC’s capabilities and optimize service delivery to clients.

6. - Incident Response: Lead incident response efforts, coordinating with internal teams and client stakeholders to mitigate and remediate security incidents.

7. - Incident Response Plans: Create and maintain incident response plans and playbooks.

8. - Security Monitoring and Analysis: Monitor and analyze security alerts, responding to and investigating incidents when required.

9. - Post-Incident Reviews: Conduct post-incident reviews to identify areas for improvement.

10. - Cross-Functional Collaboration: Collaborate with cross-functional teams and communicate effectively with executive leadership and other stakeholders on cybersecurity matters.

11. - Stay Informed: Keep up-to-date with the latest trends and developments in SOC and Digital Forensics and Incident Response (DFIR) concepts.

Requirements:

- Educational Background: Bachelor’s degree in Cybersecurity, Information Technology, or a related field.

A Master’s degree or certifications (e.g., CISM, GIAC, ECIH) are a plus.

- Experience: 10+ years of overall experience in a SOC or MDR environment, with at least 1+ years in a team lead or other leadership role.

- Cybersecurity Knowledge: Strong understanding of cybersecurity principles, technologies, and best practices.

- Digital Forensics and Incident Response: Hands-on experience and knowledge in digital forensics and incident response.

- Communication Skills: Excellent communication and interpersonal skills, with the ability to simplify complex cybersecurity concerns and explain them to non-technical teams.

- Leadership Skills: Ability to make decisions under pressure and lead a team in a dynamic environment.

- Stakeholder Interaction: Able to interact effectively with stakeholders across all levels of the organization and work collaboratively with clients and other external stakeholders.