SOC - HEAD

Job Description:

A security operations center — commonly referred to as a SOC, is a team that continuously monitors and aanalyses the security procedures of an organization. It also defends against security breaches and actively isolates and mitigates security risks. The primary function of SOC Head is to lead the team as well as participate with investigations, identification and reporting on cyber threats. It also includes coordinate resources during incident response efforts, assists with classifying security events, develop remediation guidance, support documentation and client reporting deliverables, and assists with system security compliance etc.

KEY RESPONSIBILITIES:

1. Monitor, Maintain, and Improve SOC SLA:

• Oversee the monitoring and maintenance of SOC SLAs, ensuring timely response and resolution of security incidents.
• Identify areas for improvement and implement strategies to enhance SOC performance and efficiency.

2. Enhance Response Quality:

• Monitor and improve the quality of responses to security incidents and emails, ensuring accuracy and effectiveness in threat detection and response.

3. Facilitate Weekly Learning Sessions:

• Conduct weekly learning sessions to enhance team members' skills and knowledge, fostering a culture of continuous learning and improvement.
• Work towards increasing the SOC team's maturity level through training and development initiatives.

4. Strengthen Detection Capabilities:

• Collaborate with the team to enhance Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) capabilities, improving threat detection and response times.

5. Manage Threat Reading and Hunting:

• Lead efforts to manage and enhance threat reading and hunting capabilities, staying abreast of the latest threats and attack techniques.

6. Document SOC Processes:

• Document all SOC processes and procedures, ensuring comprehensive knowledge transfer and alignment within the team.
• Provide ongoing training and support to team members on SOC processes.

7. Project Management:

• Manage SOC projects, ensuring timely delivery of reports and other deliverables to clients.
• Coordinate with stakeholders to prioritize tasks and allocate resources effectively.

8. Client Onboarding and Management:

• Oversee the client onboarding process, ensuring smooth transitions and addressing any issues or concerns promptly.
• Act as a point of contact for client escalations and inquiries, maintaining strong client relationships.

9. Mentorship and Guidance:

• Serve as a mentor and guide to the SOC team, providing leadership, support, and direction in various security aspects.
• Foster a collaborative and inclusive work environment, encouraging team members to excel and grow professionally.
• Helps in recruiting the Juniors, taking Interviews and managing the SOC skill to employee ratio and succession planning.

10. Shift Management and Roster Maintenance:

• Maintain shift availability and SOC roster, ensuring adequate coverage and adherence to schedules.
• Manage staffing levels to meet project requirements and workload demands.

11. Client Demos and PoCs:

• Coordinate and conduct client demonstrations and proof of concepts (PoCs), showcasing SOC capabilities and addressing client requirements.

12. Handle Escalations:

• Manage client and partner escalations, resolving issues promptly and effectively to maintain client satisfaction.

13. Resource Management:

• Actively participate in hiring decisions, succession and manpower planning.
• Manage manpower allocation based on customer project requirements, optimizing resource utilization and productivity.

14. Cross-Team Collaboration:

• Collaborate with other teams across the organization to address internal SOC requirements and ensure alignment with organizational goals.

15. Research and Innovation:

• Research and evaluate new tools and technologies to enhance SOC processes and detection capabilities.
• Drive innovation initiatives to stay ahead of emerging threats and security challenges.

16. Threat Intelligence Management:

• Maintain and update the Threat Intelligence Platform, leveraging threat intelligence to enhance threat detection and response strategies.

17. Team Motivation and Confidence:

• Foster a positive and motivating work environment, ensuring that the SOC team remains confident and engaged to deliver their best performance consistently.

Other roles and responsibilities management may deem to fit in.

ESSENTIAL EDUCATION:

1. A degree level qualification in Engineering, IT or Security or equivalent experience.
2. A Master’s Degree in the field Digital Forensics and Cyber Security or IT Security Certification or equivalent experience if any.

SKILLS/COMPETENCIES:

• More than 10 years of experience in this field and 5+ years of experience in team lead.
• Well versed with Security operations, Intrusion detection and incident handling
• Good and in depth knowledge of network and host security technologies and products (such as firewalls, Network IDS, SIEM, SOAR, EPP and EDR) and desire to continuously improve these skills.
• Must have worked with team handling or similar experience in the past.
• Must have a general view of the current state of information security threats and compliances.
• Individual must be a self-starter with the ability to multi-task and work within a highperformance team.
• Implementation and Audit experience in any of the following: CIS, ISO 27001, 20000, 22301, NIST Framework, HITRUST, HIPAA, SOC2, ITIL, PCI DSS, Information security and risk management frameworks/ standards. Information Technology/Security Controls, SSAE 18. – Preferred
• Proficiency with case management and ticketing systems.
• Effective tracking and task management skills.
• Strong communication, writing and interpersonal skills. Strong leadership skills with the ability with the ability to prioritize and execute in a methodical and disciplined manner, as well as to set and manage expectations with stakeholders and team members.
• Good written and oral communication skills.
• Excellent problem solving & diagnostic skills.
• Ability to work with autonomy in a proactive manner.

WORKING DAYS & HOURS

• 5 days working (Rotational shift)