Security Operations Center (SOC) Functional Lead

About the role

The Security Operations Center (SOC) Functional Lead is a senior individual contributor who provides functional leadership, technical direction, and operational oversight for SOC capabilities. The role focuses on strengthening threat detection, incident response, and continuous improvement across cybersecurity operations.

Key responsibilities

• Provide functional leadership and operational coordination for SOC activities.
• Lead high‑severity incident response, threat detection, and continuous improvement initiatives.
• Guide analysts, improve playbooks and detection content, and enhance SOC processes and tooling.
• Partner with IT, Risk, Compliance, and business stakeholders to strengthen security posture.
• Track key operational metrics and support governance, risk, and compliance requirements.

Required profile

• Strong expertise in SOC operations, incident response, SIEM/SOAR, and threat detection.
• Ability to mentor analysts, lead cross‑functional initiatives, and provide functional leadership.
• Excellent communication, stakeholder management, and problem‑solving skills.
• Understanding of security frameworks, governance, and compliance requirements.
• Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or a related field.
• 10+ years of experience in cybersecurity, including SOC operations, incident response, and detection engineering.
• Prior experience in senior individual contributor, technical lead, or functional lead roles.
• Exposure to a global SOC environment.
• Preferred certifications: CISSP, CISM, GIAC (GCIA, GCED, GCIH), Microsoft SC‑200 / AZ‑500.

Required skills

• SOC operations
• Incident response
• SIEM
• SOAR
• Detection engineering
• Threat detection
• Security platforms