SOC Lead (Security Operations Center)

📋 Description 24/7 operational oversight and escalation for monitoring and incidents. Lead multi-cloud investigations across endpoints, network, email, identity (AWS/Azure/GCP). Architect AI-driven SOC roadmap; build autonomous agents and SOAR playbooks. Lead SOC projects to optimize EDR, Email Gateways, and proactive threat hunting. Serve as technical Incident Commander during major security events. Mentor SOC analysts; create learning programs and tabletop exercises. 🎯 Requirements 8+ years in Information Security; 3+ years in a senior SOC role. Experience building 24/7 monitoring and on-call structures. Mastery of EDR/XDR, Email Gateways, and Digital Forensics tools. Cloud forensics across AWS, Azure, and GCP; CNAPP experience. Python/Bash scripting for APIs and automation. AI-augmented ops with LLMs (Claude, Gemini, Codex) and incident leadership.