SOC Team Lead
AI Summary
A well-established Cyber Security and services company is seeking a SOC Team Lead to head a professional team, manage the center's ongoing operations, develop employees, and continuously improve workflows and service quality.
About this role
A well-established Cyber Security and services company is seeking a SOC Team Lead to head a professional team, manage the center's ongoing operations, develop employees, and continuously improve workflows and service quality. This is a pivotal role that combines people management, operational responsibility, and working with clients and diverse interfaces, alongside leading processes and establishing high professional standards.
Job scope: Full-time 8:30-17:30
Location: Ness Ziona
Key Responsibilities:
Lead and manage a team of SOC analysts, including mentoring, professional development, and task allocation.
Oversee the ongoing monitoring of security systems (SIEM, EDR, IDS/IPS, etc.) and alert analysis.
Lead cyber incident response processes, from initial detection and investigation to full remediation and incident closure.
Develop and implement work procedures, playbooks, and incident response processes.
Perform deep-dive analysis of threats, trends, and anomalies, and derive actionable lessons learned.
Collaborate closely with IT, Infrastructure, Development, and Security Products teams.
Train and transfer knowledge to analysts within the team.
Continuously improve SOC tools, processes, and detection capabilities.
Write periodic reports and presentations regarding the organization's security posture and exceptional incidents.
Stay up to date with the latest cyber threats, security technologies, and innovative solutions.
Requirements:
2+ years experience as a SOC Team Lead or a similar leadership role in the information security field - a must
Hands-on experience working with SIEM systems (e.g., Splunk, Azure Sentinel, QRadar, ArcSight) – a must.
Deep understanding of network protocols, operating systems (Windows/Linux), and cloud technologies (AWS, Azure, GCP).
Knowledge and experience in cyber threat identification, analysis, and incident response.
Familiarity with additional security tools such as EDR, NDR, Threat Intelligence Platforms, Firewalls, and IPS/IDS.
Strong understanding of common cyber threats, attack vectors, and defensive techniques.
Excellent leadership, management, and employee motivation skills.
Ability to work under pressure, prioritize tasks, and make quick decisions.
High analytical skills, attention to details, and ability to learn independently.
High proficiency in English (reading and writing).
Experience in scripting (Python, PowerShell) – A significant advantage.
Relevant information security certifications (e.g., CISSP, GCIH, CySA+, CompTIA Security+) – An advantage.
A deep passion for the cyber security field.
High work ethic and strong teamwork abilities.
Proactive, creative, and self-initiated approach.
Excellent interpersonal and effective communication skills.