Назад
Company hidden
2 дня назад

SOC Team Lead (AI-Enabled Security Operations)

Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
SOC Team Lead (AI-Enabled Security Operations): Leading 24x7 SOC operations across a multi-tenant client base with an accent on incident response, analyst coaching, quality assurance, and AI-assisted triage. Focus on validating agentic security outcomes, coordinating active incidents, improving detection fidelity, and meeting operational service-level commitments.

Location: Remote, United States

Company

hirify.global provides AI-enabled managed security services through a 24x7 follow-the-sun Security Operations Center.

What you will do

  • Own SOC operations during the assigned shift, ensuring continuous monitoring coverage and accountable handoffs.
  • Manage alert and case queues, prioritize high-severity events, balance analyst workloads, and maintain service-level performance.
  • Review cases for accuracy, completeness, and defensibility before escalation or client notification.
  • Provide technical guidance, coordinate active incident response, communicate status to clients and SOC leadership, and support incident-declaration decisions.
  • Oversee human validation of agentic triage and suppression outcomes, including enrichment with client context and tuning of AI-driven workflows.
  • Coach Tier 1 and Tier 2 analysts, enforce SOPs and quality standards, and partner with detection engineering to reduce recurring noise.

Requirements

  • 5–8 years of experience in security operations or incident response, including Tier 2 or senior analyst experience.
  • Hands-on experience with SIEM, EDR/XDR, SOAR, case management, and correlation from events to alarms and SOAR cases.
  • Deep knowledge of SOC operations, detection and response workflows, and incident management.
  • Advanced understanding of operating systems, networking, attacker tactics, and the MITRE ATT&CK framework.
  • Working knowledge of detection tuning, alert suppression, and detection-as-code concepts.
  • Familiarity with AI-assisted and agentic security operations, including governance, guardrails, auditability, and human-in-the-loop validation.
  • Understanding of service-level objectives and operational security metrics in a multi-tenant MSSP, MDR, or MXDR environment.
  • Strong leadership, decision-making, communication, prioritization, organizational, and people-development skills.
  • Availability for shift-based work, including nights, weekends, holidays, and on-call rotation as required.
  • Bachelor’s degree in Cybersecurity, Computer Science, Information Security, or a related field, or equivalent professional experience and certifications.

Nice to have

  • Prior experience as a shift lead, team lead, mentor, or quality reviewer.
  • GIAC GCIH, GCIA, or GCFA; CompTIA CySA+; CISSP; CISM; Microsoft SC-200; or Palo Alto Networks XSIAM/Cortex certification.

Culture & Benefits

  • Work in a 24x7 follow-the-sun operating model with a focus on resilient, quality-driven, continuous improvement.
  • Lead an AI-enabled transformation with human oversight of autonomous security operations.
  • Support analyst development through real-time feedback, structured ramping, mentoring, and skills development.
  • USA employment benefits are referenced in the posting.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →