Overview
Security Operations Center (SOC) Shift Leads are responsible for mentorship and guidance for their team of SOC Analysts. They have technical, strategic, and leadership responsibilities within Enterprise Security. The Shift Lead supports the SOC Supervisor/Manager by providing leadership coverage, operational support, and acting as a point of escalation for the SOC personnel. This individual serves as the primary backup for SOC Leadership. As part of their functions, the Shift Lead will complete and analyze SOC metrics to ensure incidents, tasks and detections are resolved within SLA and that the queue is not aging. This individual will also actively monitor task completion and proper escalation and handoff for incidents worked by the SOC Analysts during their shifts.
This position has limited supervision.
Responsibilities
Leads the SOC team and provides support during critical and non-critical business hours on Security Operations. Provides guidance to less senior team members.
Is proactive and reactive for problem alerting, analysis, resolution, and follow ups.
Acts as a lead resource for colleagues with less experience. Mentors, trains team members.
Publish & maintain team roster & upload to relevant tools. Maintains queue-based, SOC Analyst assignments and coverage.
Drives key performance metrics, key risk indicators, project updates.
Proactively leads and identifies work requests that can be downshifted or automated via software automation and orchestration tools.
Takes a lead role in ensuring that all working knowledge sets are properly documented and communicated.
Recommends and participates in the creation of SOC standards, best practices, and roadmaps.
Performs regular quality checks on tasks, provide appropriate feedback, maintain & report the same as per metrics.
Qualifications
- Associate's Degree in Computer related discipline and/or Security certification(s) - Preferred
- 3 years of experience in Security Incident Response or Security Operations Center.
Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
Share on your newsfeed