Summary

Lead the SOC and incident response function, providing technical direction across security monitoring, detection engineering, threat investigations, and incident resolution. The role manages and develops analysts, coordinates with an external MSSP, and reports operational metrics and cyber risk to senior management.

Responsibilities

• Lead daily SOC and incident response operations
• Improve detection coverage and tune security alerts
• Investigate and coordinate complex security incidents
• Manage analysts workloads, coaching, and development
• Maintain incident response processes and documentation
• Conduct post-mortems, drills, and threat simulations
• Report incident metrics and risks to management