SOC L3 Analyst Lead

About the role

We are looking for a seasoned SOC L3 Analyst Lead to define and drive the strategic direction of our Managed Detection & Response service. The role combines hands‑on investigation of high‑severity security incidents with leadership of a multi‑level SOC team and collaboration with product and sales stakeholders.

Key responsibilities

• Formulate and define the strategic direction for Managed Detection & Response as a managed service.
• Grow the solution pipeline by working with internal and external channels.
• Investigate and orchestrate response to complex, high‑severity alerts, threats, or incidents.
• Serve as the primary point of contact for client incident‑response orchestration.
• Lead research, analysis, and correlation across diverse data sources, log collectors, and threat feeds.
• Direct technical product managers in developing new or modified MDR solutions.
• Create and maintain SOC processes, procedures, and a Use‑Case Catalog in partnership with Level 1‑3 analysts.
• Monitor competitive landscape and provide pricing guidance with value architects.

Required profile

• 10+ years leading Enterprise Security Operations Centers or MDR teams.
• Minimum 3 years experience as a Level 3 SOC analyst.
• Strong knowledge of on‑prem, hybrid, and cloud security concepts.
• Relevant certifications such as CEH, GIAC, OSCP, CREST, GCIH, CCIA, GPEN, or platform certifications (Microsoft, Splunk, Sentinel).
• Experience with SaaS/IaaS product management and enterprise software markets.

Required skills

• Threat hunting
• Penetration testing
• Digital forensics
• Incident response
• Azure Sentinel / SIEM platforms
• Security Event and Information Management tools
• SOC process development
• Cloud security (on‑prem, hybrid, public)

What we offer

• HMO coverage for employee and two dependents
• Communication, rice, and clothing allowances
• Group personal accident and life insurance
• Flexi‑ben reimbursement for medical/dental/optical expenses
• Retirement plan and bereavement assistance
• Company‑wide holiday shutdown for the last two weeks of the year