Your Mission
As Team Lead for Tier 2 SOC Analysts you will be a critical link between the global operational level (Tier 1) and advanced security functions (Tier 3 Incident Response Cyber Threat Intelligence). You will lead a team of specialists who analyze security events daily investigate threats and ensure fast precise and high-quality escalation of critical incidents to higher-level support.
Your focus will be on team development and motivation improving detection quality and optimizing processes within our global 24/7 SOC environment.
What Youll Do
- Organize and manage the daily workflow and priorities of the team plan capacity schedules and coordinate activities.
- Participate in hiring evaluating and developing team members contributing to a skilled and motivated SOC community.
- Guide and oversee the incident investigation and handling process from initial analysis to validation and effective escalation to the Tier 3 Incident Response team ensuring a fast and clear flow of information.
- Mentor and support SOC analysts developing their technical and analytical skills and lead onboarding of new members to ensure smooth and effective integration.
- Contribute to the development and continuous optimization of Use Cases and Playbooks ensuring they remain up-to-date and consistently applied in daily SOC operations.
- Actively participate in improving SOC processes detection rules and tools working closely with the SOC Manager and global teams to continuously raise efficiency and accuracy.
- Serve as a key link between the global Tier 1 team and higher SOC functions (Tier 3 Threat Intelligence Incident Response) ensuring smooth information flow standardized escalation and high-quality response to security events.
- Turn data into insights through regular reports and analyses demonstrate how your team improves detection reduces false positives and increases SOC effectiveness week by week.
Qualifications :
What We Expect
- Experience in cybersecurity SOC or Incident Response (preferably 4 years) with a willingness to take on a leadership role and mentor others (formal managerial experience not required but a leadership mindset is essential).
- Advanced understanding of network protocols operating systems SIEM tools threat analysis and good knowledge of the MITRE ATT&CK framework.
- Proficiency in English (written and spoken).
- Advantage: relevant certifications (Security CySA CASP Blue Team Level 2 etc.).
Additional Information :
What we offer:
- Work in a global SOC environment with advanced tools and technologies.
- Participation in international projects.
- Opportunity to achieve your biggest potential and development in your area of responsibility.
- Continuous development and advancement through industry-relevant certifications and internal/external training/workshops.
- Learning and sharing experiences with well-known and respected experts in the field of information/cybersecurity.
- Positive motivating international work environment with a clear focus on quality and growth.
- Hybrid work office work work from home.
- Flexible working hours.
- Additional and supplementary health insurance packages.
- Multisport membership.
- Pet-friendly office.
- Social events and team bonding gatherings.
- Compensation package consisted of base bonus part competitive in the market.
Remote Work :
No
Employment Type :
Full-time
Your MissionAs Team Lead for Tier 2 SOC Analysts you will be a critical link between the global operational level (Tier 1) and advanced security functions (Tier 3 Incident Response Cyber Threat Intelligence). You will lead a team of specialists who analyze security events daily investigate threats a...
Your Mission
As Team Lead for Tier 2 SOC Analysts you will be a critical link between the global operational level (Tier 1) and advanced security functions (Tier 3 Incident Response Cyber Threat Intelligence). You will lead a team of specialists who analyze security events daily investigate threats and ensure fast precise and high-quality escalation of critical incidents to higher-level support.
Your focus will be on team development and motivation improving detection quality and optimizing processes within our global 24/7 SOC environment.
What Youll Do
- Organize and manage the daily workflow and priorities of the team plan capacity schedules and coordinate activities.
- Participate in hiring evaluating and developing team members contributing to a skilled and motivated SOC community.
- Guide and oversee the incident investigation and handling process from initial analysis to validation and effective escalation to the Tier 3 Incident Response team ensuring a fast and clear flow of information.
- Mentor and support SOC analysts developing their technical and analytical skills and lead onboarding of new members to ensure smooth and effective integration.
- Contribute to the development and continuous optimization of Use Cases and Playbooks ensuring they remain up-to-date and consistently applied in daily SOC operations.
- Actively participate in improving SOC processes detection rules and tools working closely with the SOC Manager and global teams to continuously raise efficiency and accuracy.
- Serve as a key link between the global Tier 1 team and higher SOC functions (Tier 3 Threat Intelligence Incident Response) ensuring smooth information flow standardized escalation and high-quality response to security events.
- Turn data into insights through regular reports and analyses demonstrate how your team improves detection reduces false positives and increases SOC effectiveness week by week.
Qualifications :
What We Expect
- Experience in cybersecurity SOC or Incident Response (preferably 4 years) with a willingness to take on a leadership role and mentor others (formal managerial experience not required but a leadership mindset is essential).
- Advanced understanding of network protocols operating systems SIEM tools threat analysis and good knowledge of the MITRE ATT&CK framework.
- Proficiency in English (written and spoken).
- Advantage: relevant certifications (Security CySA CASP Blue Team Level 2 etc.).
Additional Information :
What we offer:
- Work in a global SOC environment with advanced tools and technologies.
- Participation in international projects.
- Opportunity to achieve your biggest potential and development in your area of responsibility.
- Continuous development and advancement through industry-relevant certifications and internal/external training/workshops.
- Learning and sharing experiences with well-known and respected experts in the field of information/cybersecurity.
- Positive motivating international work environment with a clear focus on quality and growth.
- Hybrid work office work work from home.
- Flexible working hours.
- Additional and supplementary health insurance packages.
- Multisport membership.
- Pet-friendly office.
- Social events and team bonding gatherings.
- Compensation package consisted of base bonus part competitive in the market.
Remote Work :
No
Employment Type :
Full-time
View more
View less