Lead and support a team of 6 SOC Analysts within a 24/7 security operations environment.
Monitor SIEM alerts and security event logs to identify suspicious activities and potential threats.
Investigate and respond to security incidents affecting systems, services, and networks.
Guide the team in developing detection rules, proactive defenses, and security automation within SIEM/SOC platforms.
Escalate complex security incidents to Level 3 (L3) Analysts.
Support forensic investigations and conduct threat hunting activities.
Collaborate with IT and security teams to contain threats, identify vulnerabilities, and implement mitigation actions.
Ensure SOC processes and procedures meet managed clients’ requirements.
Maintain security dashboards, incident reports, and operational documentation.
Participate in security awareness training.
Requirements
Minimum 2 years of experience managing a SOC team.
Bachelor’s degree in Computer Science, Information Systems, or a related field.
Strong knowledge of SIEM/SOC platforms such as FortiSIEM, Splunk, QRadar, USM Anywhere (AlienVault), or similar solutions.
Familiarity with network security, firewalls, and endpoint protection.
Excellent level in english spoken,written
Good understanding of common cyber threats, attack techniques, and incident response procedures.
Strong analytical and troubleshooting skills.
Effective communication, leadership, and teamwork skills.
Certifications such as GCIA, GCIH, Splunk Certified Admin, or CySA+ are preferred.