SOC Tech Lead

Join a leading enterprise at the forefront of cybersecurity and play a key role in shaping the professional standards of a mature SOC environment!

We're looking for an experienced SOC Tech Lead to serve as the technical authority within the SOC.

This is a technical leadership role (without people management), combining hands-on security operations with professional mentorship, detection optimization, and continuous improvement of SOC processes.

Key Responsibilities

• Provide technical leadership, mentoring, guidance, and training to Tier 1/2 SOC analysts.

• Lead and support complex security investigations, escalations, and incident response.

• Perform QA of investigations, alerts, escalations, and documentation.

• Improve triage, escalation procedures, investigation methodologies, and Playbooks.

• Develop and tune SIEM/EDR detection rules, reduce false positives, and improve detection quality.

• Analyze SOC metrics and KPIs to identify operational improvements.

• Collaborate with IT, Cloud, Incident Response, and Security teams.

Requirements

• 2–4 years of hands-on SOC / Security Operations experience, preferably across Tier 1/2 and Tier 3.

• Proven experience in mentoring, guiding, or training SOC analysts.

• Strong hands-on experience with incident investigation, triage, escalation, and response, including Cloud environments.

• Experience with SIEM, EDR, MITRE ATT&CK, Playbooks, and detection rules.

• Strong professional communication, technical depth, assertiveness, and leadership skills.

• Python or PowerShell – an advantage.

If you're passionate about Cyber Defense and want to make a real impact by advancing SOC capabilities and developing technical excellence across the team, we'd love to hear from you.