Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Tether.to

SOC Team Lead

Tether.to

. Lead, coach, and develop a distributed team of SOC Analysts across multiple regions .

Posted 11/4/2026full-timeRemote • RomaniaSeniorWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading and developing SOC teams, managing incident response processes, and enhancing security operations through effective threat hunting and detection strategies. Proficient in utilizing SIEM, EDR, and WAF technologies while ensuring compliance with frameworks like MITRE ATT&CK.

Highest-signal resume keywords
SOC LeadershipIncident ResponseThreat HuntingSIEM TuningMITRE ATT&CK Familiarity

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Security OperationsIncident TriageThreat InvestigationEDRSIEMSSEWAFDetection Content DevelopmentSecurity Posture ImprovementVulnerability Management
Soft Skills
LeadershipAnalytical SkillsProblem-SolvingAttention to DetailCommunication Skills
Certifications & Qualifications
Security+CySA+GCIAGCIHGSOMCISSP
Industry Keywords
CybersecurityNetwork SecurityEndpoint SecurityCloud SecurityZero TrustSOC MetricsKPI TrackingIncident DocumentationShift ManagementRemote Team Leadership

Tech Stack

Tools & technologies
CloudCyber Security

About the role

Key responsibilities & impact
  • Lead, coach, and develop a distributed team of SOC Analysts across multiple regions
  • Own SOC schedules and shift rotations, including weekend coverage
  • Define and enforce shift handover processes
  • Serve as the primary escalation point and incident lead for major security incidents
  • Coordinate triage, analysis, containment, eradication, recovery, and post-incident reviews
  • Perform hands-on triage, investigation, and threat hunting across SIEM, EDR, SSE, and WAF platforms
  • Review investigation and incident-documentation quality
  • Define, track, and report SOC metrics and KPIs
  • Improve detection content with security engineering
  • Tune SIEM correlation rules, EDR custom detections, and WAF rules
  • Map detection coverage to frameworks such as MITRE ATT&CK
  • Develop and maintain technical documentation, SOPs, incident-response playbooks, and escalation matrices
  • Contribute to hiring, onboarding, and training SOC Analysts
  • Collaborate with IT, infrastructure, application, security engineering, and management teams
  • Support vulnerability management and improve the organization’s overall security posture

Requirements

What you’ll need
  • Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent practical experience
  • At least 5 years of hands-on experience in Security Operations
  • At least 1 year as a SOC Lead or in an equivalent team lead role
  • Proven experience triaging alerts, investigating security incidents, and leading responses to major incidents in a production environment
  • Solid working knowledge of EDR, SSE, SIEM, and WAF
  • Experience leading or working in a 24/7 or follow-the-sun SOC
  • Experience managing shift schedules and remote teams across time zones
  • Strong experience with incident response and threat hunting
  • Familiarity with the MITRE ATT&CK framework
  • Excellent understanding of network security, endpoint security, cloud security, and Zero Trust principles
  • Relevant certifications such as Security+, CySA+, GCIA, GCIH, GSOM, CISSP, or vendor-specific credentials are a plus
  • Strong leadership, analytical, troubleshooting, and problem-solving skills
  • High attention to detail
  • Ability to handle sensitive information responsibly and securely
  • Excellent written and verbal communication skills in English
  • Ability to report to management and communicate clearly with technical and non-technical stakeholders during incidents
  • Hands-on experience implementing, configuring, and tuning security platforms or writing and tuning detection content is a plus

Benefits

Comp & perks
  • Fully remote work setting
  • Global, distributed team collaboration
  • Opportunity to work with innovative fintech, blockchain, stablecoin, energy, data, and education products
  • Global follow-the-sun operating model
  • Weekend coverage included in shift rotations (role requirement, not a benefit)