SecOps Technical Lead

As our SecOps Technical Lead, you will lead the strategy and execution of our cybersecurity defense. This is a senior, hands-on role for an expert who can manage complex security incidents while also building the infrastructure to prevent them. You will be the technical authority for our incident response, drive security automation, and ensure our external partners (MSSP) deliver top-tier results. We are looking for a reliable leader who can balance deep technical "deep-dives" with a strategic view, helping us scale our security operations and stay resilient against evolving threats.

Responsibilities

• Monitoring & IR: 24/7 security incident alerting and primary response for MSSP escalations.
• Security Engineering: Management of tools including Netskope, Crowdstrike, Okta, and Sublime.
• Automation: Developing automated runbooks for incident response and change management.
• Vulnerability & Threat Management: Managing infrastructure assessments, penetration testing, and threat intelligence.
• Compliance: Overseeing ZTNA, PCI quarterly scans, and security auditing for AD and Firewalls.
• Governance: SLA/KPI tracking for MSSPs and device posture management via Intune/Jamf.

Future Initiatives

• AI Security: Implementing controls for safe AI environment operations.
• Proactive Defense: Expanding threat hunting, deception technologies (honeypots), and CTEM/BAS.
• Hardening: Establishing CIS baseline configurations for SaaS, IaaS, and endpoints.
• Advanced Access: Expanding PAM beyond Okta and implementing IAM conditional access.

Requirements

• Experience: 7+ years of experience in Security Operations (SOC) or Incident Response, with at least 2 years in a senior/principal or technical lead capacity.
• SOC Maturity & Strategy: Proven track record of designing SOC strategies, establishing KPIs, and driving an operation from a reactive state to a mature, proactive, and highly automated environment.
• Technical Mastery: Deep, hands-on experience with EDR, SIEM, SOAR, and DLP platforms. Specific experience with CrowdStrike, Netskope, or Okta is a major advantage.
• Cloud & Identity: Strong understanding of cloud environments (AWS/GCP), SaaS security, and Zero Trust Network Access (ZTNA).
• Crisis Management: Proven track record of leading complex cyber incident responses under pressure with excellent stakeholder communication skills.
• Automation Mindset: Experience or strong familiarity with integrating AI tools, LLMs, or autonomous agents into security operations is highly desirable.
• Education/Certification: Relevant certifications (e.g., CISSP, GCIH, GCFA) or an equivalent technical background in Computer Science/Cyber Security.
• Mindset: A proactive, disciplined professional with high ownership and the ability to influence technical and non-technical teams without formal authority.