Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Tether.to

SOC Team Lead

Tether.to

. Lead, coach, and develop a distributed team of SOC Analysts across multiple regions .

Posted 11/4/2026full-timeRemote • SpainSeniorWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading and developing SOC teams, managing incident response processes, and enhancing security operations through effective triage and threat hunting. Proficient in utilizing EDR, SIEM, and WAF technologies while adhering to the MITRE ATT&CK framework.

Highest-signal resume keywords
SOC LeadershipIncident ResponseThreat HuntingEDR, SIEM, WAF TechnologiesMITRE ATT&CK Framework

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Security OperationsIncident TriageInvestigation of Security IncidentsDetection Content TuningVulnerability ManagementTechnical DocumentationSOP DevelopmentKPI TrackingShift ManagementPost-Incident Reviews
Soft Skills
LeadershipAnalytical SkillsProblem-SolvingAttention to DetailCommunication Skills
Tools & Technologies
SIEMEDRSSEWAFSecurity Platforms
Certifications & Qualifications
Security+CySA+GCIAGCIHGSOMCISSP
Industry Keywords
CybersecurityNetwork SecurityEndpoint SecurityCloud SecurityZero Trust Principles

Tech Stack

Tools & technologies
CloudCyber Security

About the role

Key responsibilities & impact
  • Lead, coach, and develop a distributed team of SOC Analysts across multiple regions
  • Own SOC schedules and shift rotations, including weekend coverage
  • Define and enforce shift handover processes for investigations, incidents, and pending actions
  • Serve as the primary escalation point and incident lead for major security incidents
  • Coordinate triage, analysis, containment, eradication, recovery, and post-incident reviews
  • Perform hands-on triage, investigation, and threat hunting across SIEM, EDR, SSE, and WAF platforms
  • Review investigation quality and incident documentation across shifts and regions
  • Define, track, and report SOC metrics and KPIs
  • Improve detection content by tuning SIEM rules, EDR detections, and WAF rules and mapping coverage to MITRE ATT&CK
  • Develop and maintain technical documentation, SOPs, incident response playbooks, and escalation matrices
  • Contribute to hiring, onboarding, and training SOC Analysts
  • Collaborate with IT, infrastructure, application, security engineering, and management teams
  • Support vulnerability management and continuously improve the organization's security posture

Requirements

What you’ll need
  • Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent practical experience)
  • At least 5 years of hands-on experience in Security Operations, including at least 1 year as a SOC Lead or in an equivalent team lead role
  • Proven experience triaging alerts, investigating security incidents, and leading responses to major incidents in a production environment
  • Solid working knowledge of EDR, SSE, SIEM, and WAF technologies
  • Experience leading or working in a 24/7 or follow-the-sun SOC, including managing shift schedules and remote teams across time zones
  • Strong experience with incident response and threat hunting
  • Familiarity with the MITRE ATT&CK framework
  • Excellent understanding of network security, endpoint security, cloud security, and Zero Trust principles
  • Strong leadership, analytical, troubleshooting, and problem-solving skills with high attention to detail
  • Ability to handle sensitive information responsibly and securely
  • Excellent written and verbal communication skills in English
  • Relevant certifications such as Security+, CySA+, GCIA, GCIH, GSOM, CISSP, or vendor-specific credentials are a plus
  • Hands-on experience implementing, configuring, and tuning security platforms or writing and tuning detection content is a plus

Benefits

Comp & perks
  • Fully remote work setting
  • Global, distributed team collaboration
  • Opportunity to contribute to innovative fintech, blockchain, digital finance, energy, data, and education products
  • Professional development through coaching, onboarding, and training opportunities
  • Global follow-the-sun working model
  • Weekend coverage and shift rotation structure