• Lead incident response efforts and coordinate with various teams to contain and mitigate security threats.
• Perform advanced threat hunting, proactively detecting and responding to malicious activities across multiple environments.
• Analyze and interpret complex security alerts, logs, and network traffic to identify potential intrusions or security events.
• Conduct root cause analysis for incidents and provide detailed recommendations for future prevention.
• Engage in fine-tuning of security tools and systems (e.g., SIEM, IDS/IPS, EDR) to improve detection accuracy and response efficiency.
• Develop, implement, and optimize automation solutions to streamline SOC operations and increase operational efficiency.
• Manage vendor relationships and engage in support calls to resolve security tool issues and escalate as needed.
• Participate in customer calls to address security issues, provide expert-level support, and ensure customer satisfaction.
• Collaborate with the sales team on pre-sales and post-sales calls to assist with technical discussions, demonstrate security capabilities, and address client needs.
• Develop, maintain, and optimize SOC processes, playbooks, and standard operating procedures (SOPs).
• Mentor and guide Level 1 and Level 2 SOC Analysts, providing technical support and direction on complex investigations.
• Stay up-to-date with the latest cybersecurity trends, attack vectors, and threat landscapes.
• Produce detailed reports and presentations for senior management and clients on incident findings, threat intelligence, and trends.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, or a related field (or equivalent experience).
• 7+ years of experience in a SOC environment, with at least 2 years at a senior or Level 3 role.
• Expertise in threat hunting, incident handling, and advanced malware analysis.
• Strong understanding of SIEM platforms and other security technologies (IDS/IPS, EDR, firewalls, etc.).
• Experience in fine-tuning security tools and implementing automation in SOC processes.
• Familiarity with scripting languages (Python, PowerShell) for automating tasks and processes.
• Experience working directly with vendors for support and escalation of security tool issues.
• Proven ability to engage with customers, providing support on issue resolution calls and participating in pre-sales and post-sales discussions.
• Excellent problem-solving skills and the ability to think critically under pressure.
• Strong communication skills and the ability to work effectively with cross-functional teams.
• Ability to mentor and lead junior analysts, fostering a collaborative and growth-oriented environment.

Preferred Qualifications:

• Relevant certifications such as CISSP, CEH, GCIA, GCIH, or similar are preferred.

NA