Cyber Operations Team Lead

• Work closely with the other SOC shift leads to help oversee the day to day operations, while assisting with the prioritization and investigation of cases when needed.

• Provide regular training and mentoring to the level 1 and level 2 SOC analysts. 

• Perform regular QA of the analysts investigations.

• Create, improve and document SOC processes and procedures, while seeking the SOC efficiency.

• Lead a small team of analysts and attend basic management tasks.

 What experience you need

• Bachelor’s degree in a technical field or equivalent job experience.

• 2+ years of relevant operational work experience in an intermediate or senior Security Analyst role or similar.

• 3+  years of experience in networking.

• 3+  years of experience with Linux/Windows OS.

• 3+ years experience working in the detection, analysis, containment, mitigation and recovery of Cyber Security Incidents.

• English proficiency B2+ or above (Belt)

 What could set you apart

• Relevant security certifications, such as CompTIA Security+, CompTIA Network+, CompTIA CySA or others.

• Experience working with tickets and ticket management systems.

• Great storytelling and communication skills.

• Basic coding experience or familiarity with different programming languages.

• Experience performing malware analysis.

• Understanding of the MITRE ATT&CK Framework.

• Familiarity conducting Host and network log analysis.

• Familiarity with SIEM log analysis and obtaining logs through applicable query languages (Splunk, McAfee, Q-Radar, Sentinel, Etc.)

• Knowledge of enterprise detection technologies(AV, EDR, IDS/IPS, Firewall, Etc).

• Strong analytical, critical thinking and problem solving.

• Ability to work under stress, tight deadlines and effectively in teams.

• Passionate desire for continuous learning of information security and physical security practices.