FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in leading and developing SOC teams, managing incident response processes, and enhancing security operations through effective threat hunting and detection strategies. Proficient in utilizing SIEM, EDR, and WAF technologies while ensuring compliance with frameworks like MITRE ATT&CK.
Highest-signal resume keywords
SOC LeadershipIncident ResponseThreat HuntingSIEM TuningMITRE ATT&CK Familiarity
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security OperationsIncident TriageThreat InvestigationEDRSIEMSSEWAFDetection Content DevelopmentSecurity Posture ImprovementVulnerability Management
Soft Skills
LeadershipAnalytical SkillsProblem-SolvingAttention to DetailCommunication Skills
Certifications & Qualifications
Security+CySA+GCIAGCIHGSOMCISSP
Industry Keywords
CybersecurityNetwork SecurityEndpoint SecurityCloud SecurityZero TrustSOC MetricsKPI TrackingIncident DocumentationShift ManagementRemote Team Leadership
Tech Stack
Tools & technologiesCloudCyber Security
About the role
Key responsibilities & impact- Lead, coach, and develop a distributed team of SOC Analysts across multiple regions
- Own SOC schedules and shift rotations, including weekend coverage
- Define and enforce shift handover processes
- Serve as the primary escalation point and incident lead for major security incidents
- Coordinate triage, analysis, containment, eradication, recovery, and post-incident reviews
- Perform hands-on triage, investigation, and threat hunting across SIEM, EDR, SSE, and WAF platforms
- Review investigation and incident-documentation quality
- Define, track, and report SOC metrics and KPIs
- Improve detection content with security engineering
- Tune SIEM correlation rules, EDR custom detections, and WAF rules
- Map detection coverage to frameworks such as MITRE ATT&CK
- Develop and maintain technical documentation, SOPs, incident-response playbooks, and escalation matrices
- Contribute to hiring, onboarding, and training SOC Analysts
- Collaborate with IT, infrastructure, application, security engineering, and management teams
- Support vulnerability management and improve the organization’s overall security posture
Requirements
What you’ll need- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent practical experience
- At least 5 years of hands-on experience in Security Operations
- At least 1 year as a SOC Lead or in an equivalent team lead role
- Proven experience triaging alerts, investigating security incidents, and leading responses to major incidents in a production environment
- Solid working knowledge of EDR, SSE, SIEM, and WAF
- Experience leading or working in a 24/7 or follow-the-sun SOC
- Experience managing shift schedules and remote teams across time zones
- Strong experience with incident response and threat hunting
- Familiarity with the MITRE ATT&CK framework
- Excellent understanding of network security, endpoint security, cloud security, and Zero Trust principles
- Relevant certifications such as Security+, CySA+, GCIA, GCIH, GSOM, CISSP, or vendor-specific credentials are a plus
- Strong leadership, analytical, troubleshooting, and problem-solving skills
- High attention to detail
- Ability to handle sensitive information responsibly and securely
- Excellent written and verbal communication skills in English
- Ability to report to management and communicate clearly with technical and non-technical stakeholders during incidents
- Hands-on experience implementing, configuring, and tuning security platforms or writing and tuning detection content is a plus
Benefits
Comp & perks- Fully remote work setting
- Global, distributed team collaboration
- Opportunity to work with innovative fintech, blockchain, stablecoin, energy, data, and education products
- Global follow-the-sun operating model
- Weekend coverage included in shift rotations (role requirement, not a benefit)
