Information Security SOC Lead

Overview

We are looking for an experienced Information Security SOC Lead to oversee threat detection and mitigation in a 24/7 Security Operations Centre. In this role, you will ensure compliance, maintain security processes, and drive continuous improvements to protect the organization from cyber threats.

Key Responsibilities

• Lead and manage SOC operations, including security incidents, investigations, threat detection, and prevention.
• Implement and operate technologies such as CSIRT, SOAR, SIEM, DLP, network monitoring, and forensic tools.
• Apply and maintain security frameworks like ISO 27001, NIST CSF, PCI DSS, ISO 22301, STRIDE, MITRE, and SSAE16.
• Identify and resolve key information security risks and issues promptly.
• Collect artifacts from client or server environments during investigations using appropriate tools.
• Assess security controls, document failures and gaps, provide remediation guidance, and prepare management reports to track remediation efforts.
• Develop metrics, analyze data, identify trends, and drive improvements in the security control environment.
• Recommend security monitoring or device tuning to reduce false positive detections.
• Design and execute phishing, vishing, and smishing campaigns.
• Implement SOC automation and enhance operational excellence.
• Work with technologies including endpoint detection and response, PowerShell, antivirus, email security, Linux, DLP, deception tools, and cloud platform security.

Requirements

• Bachelor’s or Master’s degree in Computer Science, Cyber Security, or a related field.
• Minimum 7 years of experience in Information Security or Cybersecurity, with at least 4 years in a security operations centre.
• Strong knowledge of incident management, problem management, and change management best practices.
• At least two relevant industry certifications such as Certified SOC Analyst, CISSP, SANS GSOC, GIAC, or GCFA.
• Excellent communication skills with the ability to brief senior officials.
• Expertise with industry-standard frameworks including ISO, NIST, GDPR, and PCI.
• Experience maintaining security metrics and service level agreements (SLAs).
• Hands-on experience with security technologies such as SIEM, APT threat detection, vulnerability assessment, penetration testing, malware analysis, forensics, DLP, NGAV, EDR, CASB, PAM, firewalls, proxies, email security, cloud security, and WAF.
• Experience developing and implementing enterprise SOC, blue-team, and red-team capabilities.
• Strong security mindset, problem-solving skills, and project management abilities.
• Ability to work under pressure, self-motivated with a professional work ethic.
• Skilled in diplomatic interactions across all business levels and able to translate security requirements and risks into business concepts and vice versa.