SOC Team Lead

Tether.to

. Lead, coach, and develop distributed SOC Analysts across multiple regions .

Posted 11/4/2026full-timeRemote • CzechiaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading Security Operations Center (SOC) teams, incident response, and threat hunting while ensuring effective communication and collaboration across diverse teams. Proficient in managing SOC metrics, shift schedules, and enhancing detection capabilities aligned with industry frameworks.

Highest-signal resume keywords

SOC LeadershipIncident ResponseThreat HuntingEDR, SSE, SIEM, WAF TechnologiesMITRE ATT&CK Familiarity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident TriageSecurity Incident InvestigationDetection Content ImprovementSOC Metrics TrackingTechnical Documentation Maintenance

Soft Skills

LeadershipAnalytical SkillsProblem-SolvingAttention to DetailCommunication Skills

Tools & Technologies

SIEMEDRSSEWAF

Certifications & Qualifications

Security+CySA+GCIAGCIHCISSP

Industry Keywords

CybersecurityNetwork SecurityEndpoint SecurityCloud SecurityZero Trust Principles

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Lead, coach, and develop distributed SOC Analysts across multiple regions
Own SOC schedules and shift rotations, including weekend coverage
Define and enforce shift handover processes
Serve as primary escalation point and incident lead for major security incidents
Coordinate triage, analysis, containment, eradication, recovery, and post-incident reviews
Perform hands-on triage, investigation, and threat hunting across SIEM, EDR, SSE, and WAF platforms
Review investigation quality and incident documentation
Define, track, and report SOC metrics and KPIs
Improve detection content, including SIEM correlation rules, EDR detections, and WAF rules
Map detection coverage to frameworks such as MITRE ATT&CK
Maintain technical documentation, SOPs, incident response playbooks, and escalation matrices
Contribute to hiring, onboarding, and training SOC Analysts
Collaborate with IT, infrastructure, application, security engineering, and management teams
Support vulnerability management and continuous security posture improvement

Requirements

What you’ll need

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent practical experience)
At least 5 years of hands-on experience in Security Operations, including at least 1 year as a SOC Lead or in an equivalent team lead role
Proven experience triaging alerts, investigating security incidents, and leading responses to major incidents in a production environment
Solid working knowledge of EDR, SSE, SIEM, and WAF technologies
Experience leading or working in a 24/7 or follow-the-sun SOC, including managing shift schedules and remote teams across time zones
Strong experience with incident response and threat hunting; ideally familiarity with MITRE ATT&CK
Excellent understanding of network security, endpoint security, cloud security, and Zero Trust principles
Relevant certifications such as Security+, CySA+, GCIA, GCIH, GSOM, CISSP, or vendor-specific credentials are a plus
Strong leadership, analytical, troubleshooting, and problem-solving skills with high attention to detail
Ability to handle sensitive information responsibly and securely
Excellent written and verbal communication skills in English
Based in Europe and able to cover the 08:00–17:00 UTC shift

Benefits

Comp & perks

Fully remote work
Global, distributed team collaboration
Weekend coverage and shift rotations as part of continuous operations
Opportunity to collaborate with leading fintech and digital finance specialists