Lead SOC Analyst – Security Operations

About the role

The Lead SOC Analyst will oversee the Security Operations Center, guiding analysts in threat detection, investigation, and response. You will drive threat‑hunting initiatives, produce actionable reports, and ensure timely communication of security incidents.

Key responsibilities

• Supervise daily activities of SOC analysts, reviewing their output and providing guidance.
• Report to the SOC Operations Manager with verbal and written updates on team activities.
• Communicate alerts promptly to internal and external stakeholders regarding intrusions and compromises.
• Assist response teams in implementing counter‑measures and mitigating controls.
• Recommend improvements to SOC operational effectiveness and efficiency.
• Monitor SIEM tools and event logs to identify indicators of compromise, attacks, and threats.
• Participate in incident response for large organisations, coordinating with first, second, and third‑line analysts.
• Prioritise and dispatch incidents according to defined criteria.
• Prepare attack information for release or further review.
• Analyse event details to recognise successful or unsuccessful intrusion attempts.

Required profile

• University degree in Computer Science or Information Technology.
• Minimum 5 years in analytical roles such as network forensics, threat analysis, or security engineering.
• At least 4 years of experience in investigative or incident‑response environments.
• Strong knowledge of computer networking and IT security concepts.
• 8 + years of overall security experience, with 4 + years in SOC operations.

Required skills

• GCIH certification
• SSCP certification
• CISSP certification
• CEH certification
• GIAC knowledge
• Proficiency with SIEM platforms
• Network forensics
• Threat hunting
• Incident response
• Computer networking
• IT security fundamentals