Job Purpose
Ensure the organization's cyber resilience by enhancing threat detection and response capabilities, reducing operational risk through proactive monitoring and threat hunting, improving MTTD and MTTR performance, strengthening alignment between IT and OT security operations, and supporting regulatory compliance and audit readiness.
Roles and Responsibilities
- Manage day-to-day SOC operations and MSSP performance to ensure effective 24/7 security monitoring across IT and OT environments.
- Lead the full incident response lifecycle, including detection, containment, eradication, recovery, stakeholder communication, and post-incident reviews.
- Develop, implement, and optimize threat detection strategies, use cases, and monitoring capabilities aligned with the MITRE ATT&CK framework.
- Conduct proactive threat hunting activities, develop hunting methodologies and playbooks, and drive actionable security improvements.
- Enhance security technology effectiveness through integration, optimization, and automation of SIEM, XDR/EDR, NDR, SOAR, IAM, and network security solutions.
- Perform root cause analysis and lessons learned activities to strengthen detection capabilities, security controls, and preventive measures.
- Mentor and develop SOC analysts while driving SOC capability maturity and fostering a proactive security culture.
- Monitor SOC performance metrics, provide executive-level reporting, and ensure compliance with security policies and regulatory requirements.
- Integrate threat intelligence into detection and response operations to improve defense against emerging threats, APTs, and ransomware campaigns.
- Collaborate with Infrastructure, Cloud, Vulnerability Management, and Red Team functions to align cybersecurity operations with organizational security objectives.
Job Requirements & Skills
- Bachelor's degree in Cybersecurity, IT, or a related field.
- Minimum 5 years of experience in cybersecurity.
- OFFSEC SOC200 certification is highly preferred.
- Proven experience in SOC Operations, Blue Team, Incident Response, and Threat Hunting.
- Hands-on experience with SIEM, XDR/EDR/NDR/MDR platforms, Threat Intelligence, Log Analysis, and Digital Forensics.
- Strong knowledge of Windows/Linux Server, Network Security (Firewall, VPN, ZTNA), Active Directory, Microsoft Entra, Office 365, and Conditional Access.
- Familiarity with OT Security and VAPT tools (e.g., Kali Linux, Nessus, Metasploit).
- Strong understanding of the MITRE ATT&CK Framework, attack techniques, and adversary behavior.
