SOC Lead (Security Operations Center)

About the role

We are looking for a highly technical SOC Lead to spearhead our Global Cybersecurity Operations team. In this role, you will own the 24/7/365 security operations ecosystem, driving the strategic and technical evolution of our modern cybersecurity operating model. You will be responsible for ensuring continuous monitoring coverage, serving as the ultimate technical escalation point, and architecting an advanced defense infrastructure. We are scaling a modern, multi-cloud, intelligence-driven SOC that heavily leverages AI and cutting-edge automation. This role requires a hands-on technical leader who can seamlessly pivot between deep-dive cloud investigations, code-driven automation project management, and mentoring a high-performing engineering team.

Requirements

• 8+ years of hands-on experience in Information Security, with at least 3+ years in a senior or lead technical capacity within a SOC or Incident Response team.
• Proven experience building or managing operational structures for 24/7 monitoring and on-call rotations.
• Deep technical mastery of modern security architectures, including EDR/XDR, Email Security Gateways, and Digital Forensics tools.
• Strong expertise in Cloud Security Forensics across AWS, Azure, and GCP, alongside experience utilizing CNAPP platforms.
• Strong programming and scripting skills (e.g., Python, Bash) to build custom API integrations and automation tooling.
• Experience with AI-augmented engineering and workflows, utilizing LLM methodologies (such as Claude Code, Gemini, or Codex) to automate defensive operations.
• Exceptional leadership capabilities with a track record of mentoring technical teams and managing high-stress incident scenarios.
• Flexibility to be paged outside of standard business hours as the escalation point for high-impact incidents.

Your Match

How well this role fits your profile.

Company Intel

What employees say

Worked at crypto? Share your experience