SOC Team Lead

Coral Reef Technologies is a unique financial services company utilizing cutting edge algorithmic trading technology worldwide. We are one of the leading companies in our field globally, operating on a global scale, facing leading banks, exchanges and providers.

As our first SOC Team Lead, you will have the exciting opportunity to build and lead our new SOC/NOC fusion center. You will be responsible for overseeing the daily operations and leading our incident response efforts to protect our company data. You will focus on designing, building, maintaining and optimizing our SIEM, monitoring tools and drive state-of-the-art SOC initiatives and process.

This position is On-Site in Herzliya 

About the Role

• Lead and manage a team of SOC and NOC analysts to ensure 24/7 monitoring of security alerts and operational incidents.
• Establish and enforce processes, procedures and workflows to detect, analyze, contain and eliminate incidents efficiently
• Prepare incident response plans and playbooks for different types of security incidents
• Communicate with stakeholders and resolve security and operational incidents as part of incident response activities
• Identify root causes of incidents and recommend corrective actions to prevent future ones
• Optimize and configure security tools to provide maximum visibility
• Define key performance indicators (KPIs) for your SOC/NOC operations and monitor metrics
• Prepare regular reports on SOC/NOC activities, incident trends and metrics for senior management and stakeholders
• Design and implement processes and procedures to keep the team up to date with the latest cybersecurity threats, technologies, and best practices

Experience & Skills

• Proven leadership experience in a SOC or related information security role
• 3+ years as SOC Analyst or SOC Engineer
• Hands on capabilities - research and leading incident response teams
• Strong analytical and problem-solving abilities, with a keen attention to detail
• Experience in building a SOC team, including staffing, recruitment, supervision, development and evaluations - Advantage
• Strong foundation in cybersecurity principles, practices, and technologies; threat intelligence/intrusion detection/prevention systems
• Continuous learning and adaptability; commitment and continuous learning and stay up to date with industry trends, emerging threats, and security best practices