Sr Security SOC Lead

Insight Global - Plano, TX

Full-time - Mid Level

Plano, TX

Administrative and Support Services

About the position

The Sr Security SOC Lead is responsible for overseeing security operations within a customer environment, ensuring timely detection and notification of threats. This role involves managing deliverables according to service level agreements, understanding customer requirements, and ensuring the integration and health of monitoring infrastructure. The lead will also be responsible for incident handling, threat hunting, and ensuring that operational procedures align with best practices and customer expectations.

Responsibilities

• Ensure all threats at customer environment are detected and notified in timely manner.
• Ensure customer deliverables are being provided as per agreed service level agreements.
• Understand customer requirements and translate these into service outputs.
• Keep track of scope and scope deviations, scheduled and adhoc deliverables.
• Work with platform administration function to ensure integration of new devices, ensure health of monitoring infrastructure.
• Ensure threat scenarios and operating procedures are in line with best practices and customer expectations.
• Conduct incident handling including detection, analysis, and triage.
• Perform hunting for anomalous pattern detection and content management.
• Investigate security events and distinguish incidents from non-incidents.
• Monitor log sources as per scope and ensure governance and validity of in-scope/out-of-scope log sources.
• Ensure that each log source has use cases and hunting models, and no threat detection aspect is missed.
• Conduct gap analysis based on customer domain, business applications, and technology deployed.
• Act as the single point of contact (SPOC) for client problems and requirements, ensuring timely response to customer queries.
• Show value/benefits of the delivery during MIS/QBR meetings and articulate SOC value add.

Requirements

• Minimum 6 years total experience with at least 3+ years in a security operations environment.
• Minimum 2 years experience managing a team.
• Minimum 2 years experience in client-facing roles.
• Good understanding of SIEM SOC concepts and operations.
• Clear technical and operational understanding of areas worked in.
• Good verbal and written communication skills.
• Engineering graduate preferably B.E. / B.Tech in IT or Computer Engineering.
• One certification preferred: CCNA or CEH.