SOC Analyst L3 / Security Operations Team Lead

Description

As the Security Operations Team Lead – Level 3, you will play a critical role in expanding the scope and capabilities of SOC Managed Services. Reporting to the Director of Cyber Security, you will lead the Security Operations team, ensuring exceptional customer experience and best-in-class security outcomes.

You will be responsible for managing staffing shifts, identifying improvement opportunities, and driving operational efficiencies to protect customers' assets.

Responsibilities

• Provide world-class customer experience and security outcomes for customers.
• Ensure adherence to Customer Service Level Agreements (SLAs) and timely resolution of requests and incidents while meeting quality standards.
• Provide security expertise during incident responses, including remediation and prevention documentation.
• Manage staffing shifts and team levels to ensure operational coverage.
• Drive improvement opportunities for customer experience, security value, and operational efficiencies.
• Communicate operational information effectively between shift teams.
• Take ownership of cases escalated by SIEM Analysts (Tier II) and initiate counteractive procedures for potential threats and vulnerabilities.
• Assist in developing processes and procedures to improve incident response times and overall Security and Support functions.
• Identify coaching and development opportunities for Security and Support Analysts.
• Manage assigned team members, including performance reviews, attendance, and career development.

• Produce daily, weekly, and monthly operational metrics.

   

• Required Qualifications & Experience
• 8–10+ years of progressive experience in Security Operations and/or Engineering.
• 2–3 years of experience leading a team.
• At least 5+ years of experience in a SOC Analyst role, including L2 experience.
• Strong understanding of networking technologies.
• Experience with leading SIEM tools and technologies such as Microsoft Sentinel, M365 Defender, QRadar, and Splunk.
• Strong understanding of security best practices and incident response procedures.
• Experience with threat intelligence, KQL queries, and automation.
• Hands-on experience with Azure Security.
• Experience with scripting languages such as Python, PowerShell, and JavaScript.
• Familiarity with incident response requirements based on NIST guidelines.
• Experience with the MITRE ATT&CK framework for incident investigation and threat hunting.
• Experience conducting investigations using packet analysis, log analysis, and endpoint forensics.
• Strong ownership of operational issues, with a focus on resolution and accountability.
• Clear and confident communication skills.
• Willingness to work in a 24/7 operational environment.

• Benefits & Compensation
• Life Insurance.
• Optional Health Insurance.
• EOBI.
• Voluntary Pension Scheme (as per company policy).
• Complimentary Meals.
• Access to an In-house Gym.

• Equal Employment Opportunity
• The organization is an equal opportunity employer committed to fostering an inclusive and diverse workplace. All qualified applicants will receive consideration for employment without discrimination on any legally protected basis.

Experience

8 Years

Apply By

Dec 9, 2026

Required Skills

• Team Leadership
• Security Incident Investigation
• Endpoint Forensics
• Log Analysis
• Packet Analysis
• MITRE ATT&CK Framework
• NIST Guidelines
• Python
• Azure Security
• KQL Queries
• Threat Intelligence
• Incident Response
• Security Best Practices
• Splunk
• Qradar
• M365 Defender
• Microsoft Sentinel
• SIEM Tools
• Networking Technologies
• SOC Analyst
• Security Operations

Nice to Have Skills

• PowerShell
• JavaScript
• Operational Metrics Reporting
• Automation