SOC Tech Lead

Join a leading enterprise at the forefront of cybersecurity and play a key role in shaping the professional standards of a mature SOC environment!

We're looking for an experienced SOC Tech Lead to serve as the technical authority within the SOC.

This is a technical leadership role (without people management), combining hands-on security operations with professional mentorship, detection optimization, and continuous improvement of SOC processes.

Key Responsibilities

• Provide technical leadership, mentoring, guidance, and training to Tier 1/2 SOC analysts.
• Lead and support complex security investigations, escalations, and incident response.
• Perform QA of investigations, alerts, escalations, and documentation.
• Improve triage, escalation procedures, investigation methodologies, and Playbooks.
• Develop and tune SIEM/EDR detection rules, reduce false positives, and improve detection quality.
• Analyze SOC metrics and KPIs to identify operational improvements.
• Collaborate with IT, Cloud, Incident Response, and Security teams.

Requirements

• 2–4 years of hands-on SOC / Security Operations experience, preferably across Tier 1/2 and Tier 3.
• Proven experience in mentoring, guiding, or training SOC analysts.
• Strong hands-on experience with incident investigation, triage, escalation, and response, including Cloud environments.
• Experience with SIEM, EDR, MITRE ATT&CK, Playbooks, and detection rules.
• Strong professional communication, technical depth, assertiveness, and leadership skills.
• Python or PowerShell – an advantage.

If you're passionate about Cyber Defense and want to make a real impact by advancing SOC capabilities and developing technical excellence across the team, we'd love to hear from you.