Job Title
To strengthen our security operations and client management capabilities.
As our MSSP client base and security service scope continue to grow, we require a dedicated resource who can act as the technical security interface between our SOC team and clients. The role will be responsible for ensuring that security monitoring activities, reporting, client queries, and security-related requirements are handled effectively and professionally.
Key Responsibilities
The Security Lead will be responsible for
SOC Client Management
- Understand the client's IT and security environment, including firewalls, servers, endpoints, network devices, applications, cloud infrastructure, EDR/XDR and other security technologies.
- Understand the security monitoring scope and requirements for each MSSP client.
- Act as the primary technical point of contact for security-related client queries.
- Coordinate with SOC analysts and internal technical teams for resolution of client requirements.
Security Monitoring & Operations
- Review the overall SOC monitoring activities and ensure that client assets are appropriately monitored.
- Understand security alerts, incidents, use cases, correlation rules, and escalation requirements.
- Identify gaps in monitoring coverage and recommend improvements.
- Ensure appropriate follow-up on security incidents and client security observations.
Weekly / Monthly Security Reporting
- Review and validate weekly and monthly SOC reports before they are shared with clients.
- Ensure reports contain accurate and meaningful security information.
- Analyse security trends, incidents, vulnerabilities, top alerts, asset coverage, and other relevant security metrics.
- Prepare management-level security summaries and recommendations.
- Ensure reports are aligned with the client's agreed SLA/KPI and security requirements.
Client Queries & Technical Discussions
- Respond to client queries related to SOC reports, security alerts, incidents, and recommendations.
- Explain security findings and observations to clients in clear business and technical language.
- Address queries related to the security posture of client assets.
- Participate in client meetings and periodic security review meetings.
- Coordinate with the SOC team to provide appropriate technical evidence and clarification to clients.
Client Asset Security
- Understand the security posture of client infrastructure and identify potential security gaps.
- Review onboarding of new assets and ensure appropriate security monitoring coverage.
- Maintain an understanding of client infrastructure changes and their impact on SOC monitoring.
- Recommend security mprovements based on observed risks and security events.
Security Governance & Servi Improvement
- Ensure SOC services are delivered according to agreed scope, SLA, and operational processes.
- Identify recurring security issues and recommend corrective actions.
- Assist in developing and improving SOC processes, reporting formats, dashboards, and security use cases.
- Support client audits, security assessments, technical discussions when required.
Desired Skills & Experience
The candidate should have strong practical knowledge of:
- SOC / MSSP operations
- SIEM platforms and security monitoring
- Security incident analysis and response
- Network security and firewalls
- EDR/XDR technologies
- Vulnerability management
- Windows and Linux security
- Cloud security fundamentals AWS / Azure
- Network and security architecture
- Log management and security event analysis
- Security reporting and KPI/SLA management
- IT security risk assessment
- Client-facing technical communication
Experience with SIEM, SOC, MSSP or managed security services will be highly preferred.
Key Competencies
The candidate should be able to:
- Understand a client's complete security environment rather than focusing only on individual security tools.
- Analyse security information and convert it into meaningful observations and recommendations.
- Communicate effectively with both technical teams and client management.
- Review security reports critically and ensure the information presented to the client is accurate.
- Handle client queries independently and coordinate internally when additional technical expertise is required.
- Take ownership of client security deliverables and follow them through to closure.
Proposed Position
Position:
Department:
Experience:
Employment Type:
This position will help us establish stronger ownership of client security operations, improve the quality and consistency of client reporting, reduce dependency on individual SOC resources for client-facing activities, and provide clients with a dedicated security point of contact
hr@leotechnosoft.net
