SOC MANAGER / SOC LEAD

Manage day-to-day operations of a multi-tier SOC team (L1/L2/L3 analysts, incident responders, threat hunters).
Define SOC processes, SLAs, KPIs, and metrics to ensure efficient monitoring and response.Oversee 24/7 operations, shift planning, and escalation mechanisms.Implement and maintain cyber incident response plans, playbooks, and runbooksOversee detection, triage, investigation, containment, and remediation of security incidents.Lead high-severity incident response efforts and executive-level incident communication.Ensure timely resolution of security alerts and continuous tuning of detection rules.Coordinate with IT, network, cloud, and application teams for event correlation and remediation.Manage SIEM, SOAR, EDR/XDR, threat intelligence platforms, vulnerability management tools, and log management systems.Drive use-case development, automation, and orchestration to improve response efficiency.Evaluate and deploy new security technologies aligned with SOC maturity roadmap.Collaborate with CISO, compliance, risk, and IT teams to strengthen overall security posture.Deliver weekly/monthly SOC reports and executive dashboards.Support pre-sales team for SOC-as-Services Basic Qualifications12–18 years of overall cybersecurity experience, with 6+ years leading SOC or Incident Response teams.Strong expertise in FortiSIEM & FortiSOAR platforms. Hands-on experience with EDR/XDR, threat intelligence, malware analysis workflows, cloud security monitoring (AWS & Azure).Deep understanding of security frameworks: MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls.Proven experience handling major cyber incidents (ransomware, phishing, insider threats, cloud breaches).Excellent leadership, communication, and stakeholder management skills.Strong analytical, problem-solving, and decision-making ability.Preferred candidates with certifications like CEH, CHFI or similar