SOC Lead - Security Operations

Job Title: SOC Lead – Security Operations
Location: Hybrid preferred in Frisco, TX (Open to Remote)
Duration: Contract

MOI : Video

Role Overview

Client is seeking an experienced Security Operations Center (SOC) Lead to strengthen, mature, and optimize its SOC capabilities. This role will lead incident response operations, enhance SOC processes, drive automation, and improve overall security posture. The ideal candidate will bring strong hands-on SOC experience, leadership capabilities, and a passion for operational excellence and continuous improvement.

Key Responsibilities

• Lead security incident response activities, including detection, investigation, containment, remediation, and post-incident analysis.
• Develop, refine, and maintain incident response playbooks and operational procedures.
• Drive SOC process maturity, automation initiatives, and operational efficiency improvements.
• Collaborate closely with Managed Security Service Providers (MSSPs) to ensure optimal service delivery and incident handling.
• Manage and enhance SIEM operations, including tuning, alert optimization, and workflow automation.
• Define, track, and report SOC metrics and KPIs to measure performance and effectiveness.
• Identify gaps in security operations and implement continuous improvement strategies.
• Support threat hunting, detection engineering, and security tooling optimization.
• Act as an escalation point for complex security incidents and investigations.

Required Qualifications

• 5+ years of experience in Security Operations, including hands-on SOC experience.
• Proven expertise in incident response, triage, investigation, and remediation.
• Strong experience with SIEM platforms, alert tuning, and log analysis.
• Hands-on experience developing incident response playbooks and workflows.
• Experience working with Managed Security Service Providers (MSSPs).
• Strong knowledge of security operations processes, automation, and SOC best practices.
• Excellent communication, leadership, and stakeholder collaboration skills.

Preferred Qualifications

• Experience implementing security automation and orchestration (SOAR) tools.
• Knowledge of threat intelligence platforms and detection engineering.
• Familiarity with cloud security monitoring (AWS, Azure, Google Cloud Platform).
• Relevant certifications such as CISSP, CISM, GCIA, GCIH, or Security+.