Security Operation Lead

Role Overview: As a Lead SOC Analyst (L3), your role will involve supervising and reviewing all L3 SOC activities to ensure quality and timely execution. You will be responsible for identifying and automating repetitive/mundane tasks to enhance operational efficiency. Conducting threat modeling for company assets and defining precise use cases for threat detection will be a key part of your responsibilities. Additionally, you will work on improving threat hunting capabilities using advanced tools and techniques. Key Responsibilities: - Develop and optimize content for security detection, including tuning to reduce false positives. - Lead and manage incident response activities, continuously enhancing incident response plans, and ensuring real-time synchronization between DC and DR environments. - Participate in Disaster Recovery (DR) drills, cyber drills, and tabletop exercises. - Analyze threat intelligence feeds, derive actionable insights, and define relevant detection use cases. - Review and maintain Standard Operating Procedures (SOPs), oversee vulnerability management, including remediation, patching, and version upgrades, and generate SOC performance metrics and management-level reports. - Provide support during forensic investigations, advanced threat hunting engagements, and continuously assess technology maturity against global standards. - Develop and manage technology roadmaps and enhancement plans, provide on-the-job training and mentorship to internal SOC team members, and handle escalations for L1, L2, and L3 teams effectively. Qualifications Required: - Deep expertise in log analysis, incident response, threat hunting, and threat intelligence. - Hands-on experience with SIEM, SOAR, and other SOC technologies (such as ArcSight). - Strong understanding of Windows and Linux log sources, experience managing cross-functional SOC teams, and excellent communication and documentation skills.,