RemoteLeaf Logo
Log in Sign up

SOC Team Lead

1 hour, 17 minutes ago
United States
Full-time
Lead
Security Analyst
Cybersecurity
Cybersecurity SIEM
Apply Now
AHEAD

AHEAD

AHEAD accelerates the impact of technology on clients by engineering customized data, developer, and infrastructure platforms that improve IT operations. By weaving together cloud infrastructure, intelligent operations, and modern applications, we help...

IT Services
1001-5000
$43M raised
View All Jobs 4

Description

  • Own SOC operations for the assigned shift, including continuous monitoring coverage and accountable follow-the-sun handoffs.
  • Manage alert and case queues, balance analyst workloads, prioritize high-severity events, and drive timely case resolution.
  • Review investigations for accuracy, completeness, and defensibility before escalation or client notification.
  • Serve as the first escalation point for analysts and guide complex investigations and incident-declaration decisions.
  • Coordinate active incident response, including communications, task assignments, client updates, and leadership status reporting.
  • Oversee and validate AI-driven triage and suppression outcomes, incorporating client context and human-in-the-loop controls.
  • Coach and develop Tier 1 and Tier 2 analysts through real-time feedback, mentoring, and skills development.
  • Monitor shift performance against MTTD, MTTR, MTTC, false-positive rates, SLA attainment, and other service metrics.
  • Ensure adherence to and continuous improvement of SOPs, runbooks, playbooks, and quality standards.
  • Partner with detection engineering and Tier 2 teams to improve detection tuning and reduce recurring alert noise.

Requirements

  • 5–8 years of experience in security operations or incident response, including Tier 2 or senior analyst experience.
  • Deep hands-on knowledge of SOC operations, detection and response workflows, and incident management.
  • Experience with SIEM, EDR/XDR, SOAR, case management, and event correlation; Elastic Security and Palo Alto Cortex XSIAM experience is required.
  • Advanced knowledge of operating systems, networking, attacker tactics, and the MITRE ATT&CK framework.
  • Working knowledge of detection tuning, alert suppression, and detection-as-code concepts.
  • Familiarity with AI-assisted or agentic security operations and human-in-the-loop governance controls.
  • Understanding of service-level objectives and security metrics in a multi-tenant MSSP, MDR, or MXDR environment.
  • Strong leadership, coaching, prioritization, decision-making, and client-facing communication skills in high-pressure incidents.
  • Availability for shift work, including nights, weekends, holidays, and on-call rotation as needed.
  • Bachelor’s degree in a cybersecurity-related field or equivalent professional experience and certifications; shift-lead experience and certifications such as GIAC, CySA+, CISSP, CISM, SC-200, or Palo Alto Networks certifications are preferred.

Benefits

  • On-target earnings consisting of base salary and applicable target bonus.
  • Medical, dental, and vision insurance.
  • 401(k) retirement plan.
  • Paid company holidays and paid time off.
  • Paid parental and caregiver leave.
  • Cross-department training, professional development, and sponsored certifications and credentials.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Prolific

Cyber Security Analyst - Research Participants - United Kingdom

Prolific 201-500 Professional Services

Join Prolific as a UK-based Cyber Security Analyst research participant, contributing voice interviews and survey responses to a policy-focused research study.

United Kingdom Freelance Entry Level Security Analyst
$53k-$53k
Cybersecurity
23 hours, 17 minutes ago
L

Cybersecurity Analyst (Remote)

Lever Implementation Training Environment

Join Lever, a recruiting software company, in a test-environment role supporting its hiring platform operations.

United States Full-time Mid Level Security Analyst
2 days, 1 hour ago
Overwatch

Senior Cyber Fraud Threat Intelligence Investigator

Overwatch 1-10 Internet Software & Services

Overwatch Data seeks a Fraud/Cyber Threat Intelligence Investigator to deliver evidence-backed intelligence on cyber-enabled fraud and emerging criminal risks for customer risk teams.

United States Senior Security Analyst
Cybersecurity
2 days, 23 hours ago
PDI Technologies,

Head of Security & Network Operations

PDI Technologies, 1001-5000 Gas Utilities

Lead PDI Technologies’ global, customer-facing SOC and NOC as a unified 24/7 operation, improving security outcomes, network reliability, service quality, and delivery economics for 12,000+ customers.

United States Full-time Executive Network Engineer Security Analyst
AWS Azure GCP
3 days, 2 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers