Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$145к$165кмедиана$210к
14 в выборке
83
Хорошая вакансия
развернуть
Обязанности руководителя SOC описаны чётко: здесь есть и управление командой, и участие в реагировании на инциденты, и контроль AI-процессов. При этом сменный график и формат managed services могут заметно влиять на повседневную работу.
Кликните для подробной информации
Ночные сменыСовременная киберзащитаЧёткие обязанностиРабота с клиентами
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
SOC Team Lead (AI-Enabled Security Operations): Leading 24x7 SOC operations across a multi-tenant client base with an accent on incident response, analyst coaching, quality assurance, and AI-assisted triage. Focus on validating agentic security outcomes, coordinating active incidents, improving detection fidelity, and meeting operational service-level commitments.
Location: Remote, United States
Company
hirify.global provides AI-enabled managed security services through a 24x7 follow-the-sun Security Operations Center.
What you will do
Own SOC operations during the assigned shift, ensuring continuous monitoring coverage and accountable handoffs.
Manage alert and case queues, prioritize high-severity events, balance analyst workloads, and maintain service-level performance.
Review cases for accuracy, completeness, and defensibility before escalation or client notification.
Provide technical guidance, coordinate active incident response, communicate status to clients and SOC leadership, and support incident-declaration decisions.
Oversee human validation of agentic triage and suppression outcomes, including enrichment with client context and tuning of AI-driven workflows.
Coach Tier 1 and Tier 2 analysts, enforce SOPs and quality standards, and partner with detection engineering to reduce recurring noise.
Requirements
5–8 years of experience in security operations or incident response, including Tier 2 or senior analyst experience.
Hands-on experience with SIEM, EDR/XDR, SOAR, case management, and correlation from events to alarms and SOAR cases.
Deep knowledge of SOC operations, detection and response workflows, and incident management.
Advanced understanding of operating systems, networking, attacker tactics, and the MITRE ATT&CK framework.
Working knowledge of detection tuning, alert suppression, and detection-as-code concepts.
Familiarity with AI-assisted and agentic security operations, including governance, guardrails, auditability, and human-in-the-loop validation.
Understanding of service-level objectives and operational security metrics in a multi-tenant MSSP, MDR, or MXDR environment.
Strong leadership, decision-making, communication, prioritization, organizational, and people-development skills.
Availability for shift-based work, including nights, weekends, holidays, and on-call rotation as required.
Bachelor’s degree in Cybersecurity, Computer Science, Information Security, or a related field, or equivalent professional experience and certifications.
Nice to have
Prior experience as a shift lead, team lead, mentor, or quality reviewer.
GIAC GCIH, GCIA, or GCFA; CompTIA CySA+; CISSP; CISM; Microsoft SC-200; or Palo Alto Networks XSIAM/Cortex certification.
Culture & Benefits
Work in a 24x7 follow-the-sun operating model with a focus on resilient, quality-driven, continuous improvement.
Lead an AI-enabled transformation with human oversight of autonomous security operations.
Support analyst development through real-time feedback, structured ramping, mentoring, and skills development.
USA employment benefits are referenced in the posting.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →