SOC Team Lead

Tether.to

. Lead, coach, and develop distributed SOC Analysts across regions and time zones .

Posted 11/4/2026full-timeRemote • PolandSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading and developing Security Operations Center (SOC) teams, with a strong focus on incident response, threat hunting, and security posture improvement. Proficient in managing SOC operations, including shift scheduling and performance metrics, while ensuring effective communication and collaboration across teams.

Highest-signal resume keywords

SOC LeadershipIncident ResponseThreat HuntingEDR, SSE, SIEM, WAF TechnologiesMITRE ATT&CK Familiarity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security OperationsIncident InvestigationTriage AlertsDetection Content ImprovementTechnical Documentation DevelopmentVulnerability ManagementShift SchedulingKPI TrackingCloud SecurityZero Trust Principles

Soft Skills

LeadershipAnalytical SkillsTroubleshootingProblem-SolvingCommunication Skills

Certifications & Qualifications

Security+CySA+GCIAGCIHGSOMCISSP

Industry Keywords

SOC AnalystsIncident LeadPost-Incident ReviewsSOPsPlaybooksEscalation MatricesRemote Teams24/7 OperationsSensitive Information HandlingProduction Environment

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Lead, coach, and develop distributed SOC Analysts across regions and time zones
Own SOC schedules and shift rotations, including weekend coverage
Define and enforce shift handover processes
Serve as primary escalation point and incident lead for major security incidents
Coordinate triage, analysis, containment, eradication, recovery, and post-incident reviews
Perform hands-on triage, investigation, and threat hunting across SIEM, EDR, SSE, and WAF platforms
Review investigation and incident-documentation quality
Define, track, and report SOC metrics and KPIs
Improve detection content, including SIEM correlation rules, EDR detections, and WAF rules
Map detection coverage to MITRE ATT&CK
Develop technical documentation, SOPs, playbooks, and escalation matrices
Contribute to hiring, onboarding, and training SOC Analysts
Collaborate with IT, infrastructure, application, security engineering, and management teams
Support vulnerability management and improve the organization’s security posture

Requirements

What you’ll need

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent practical experience)
At least 5 years of hands-on experience in Security Operations, including at least 1 year as a SOC Lead or equivalent team lead
Experience triaging alerts, investigating security incidents, and leading major incident response in production
Working knowledge of EDR, SSE, SIEM, and WAF technologies
Experience with 24/7 or follow-the-sun SOC operations, shift schedules, and remote teams across time zones
Strong incident response and threat hunting experience; ideally familiarity with MITRE ATT&CK
Understanding of network, endpoint, cloud security, and Zero Trust principles
Strong leadership, analytical, troubleshooting, and problem-solving skills
Ability to handle sensitive information securely
Excellent written and verbal English communication skills
Relevant certifications such as Security+, CySA+, GCIA, GCIH, GSOM, CISSP, or vendor-specific credentials are a plus
Hands-on implementation, configuration, tuning, or detection-content experience is a plus

Benefits

Comp & perks

Fully remote work
Global, distributed team environment
Opportunity to collaborate with international fintech and security professionals
Professional development through coaching, onboarding, and training activities
Opportunity to contribute to innovative blockchain and digital finance products