Security Operations Team Lead
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Operations Team Lead leading incident response, agentic SOC operations, and security engineering at Cyera. Securing enterprise AI adoption through internal customer-zero operations.
Responsibilities:
- Lead, coach, and develop the Security Operations team
- Set priorities, run the operational cadence, and build career paths
- Direct response to major incidents, make containment calls, manage stakeholder communication, and own after-action processes
- Own metrics and roadmap for the agentic SOC
- Manage the fleet of security agents handling first-pass triage, investigation, and response
- Define guardrails and human approval points, evaluate accuracy, maintain an audit trail, and report impact on autonomous handling and analyst capacity
- Own posture goals, remediation governance, product feedback loop, and reporting for the internal Cyera deployment
- Set detection and response priorities with the Security Engineering lead based on threat model and coverage
- Design and run on-call and coverage arrangements, including external or follow-the-sun support
- Handle the hardest investigations, build detections and playbooks, and write code using AI-assisted workflows
- Represent Security Operations to security leadership and R&D; translate operational data into risk and status
Requirements:
- 5 or more years in security operations, incident response, or detection engineering, including senior or lead-level work
- Experience running significant incidents end to end, including executive communication
- Experience leading, mentoring, or managing engineers or analysts
- Hands-on experience running AI-assisted and agent-based security workflows, with a clear view of where agents are reliable, where they fail, and how to measure both
- Strong knowledge of AWS security architecture, IAM, logging, and cloud incident response
- AWS Security Specialty or Solutions Architect Associate, or equivalent demonstrated depth
- Strong Python and detection engineering across SIEM and cloud telemetry; able to review and improve others' work
- Experience defining metrics, running an operational cadence, and reporting to leadership
- Clear communication with executives and engineers; calm and decisive under pressure
- Experience with DSPM, DLP, or operating a security product as an internal customer
- Experience in regulated environments such as FedRAMP, SOC 2, or ISO 27001
- GCIH, GCFA, CISSP, AWS Security Specialty, or similar certifications are nice to have
Benefits:
- Unlimited PTO
- Paid holidays and sick time
- Health, vision, and dental insurance
- Life, short and long-term disability insurance
- Standard benefits and equity package
- Potential merit increases based on individual or company performance, time in role, and other discretionary factors
Similar Jobs
SecOps Engineer
SecOps Engineer monitoring threats and managing security operations for compliance software serving 50,000+ organisations globally. Supporting incident response, vulnerability management, cloud security, and regulatory compliance.
IAM Security Operations Engineer – Middle
IAM Security Operations Engineer maintaining secure identity services for SOFTSWISS. Managing JML lifecycle processes, RBAC access, Keycloak, Adaxes, and IAM integrations.
Blue Team Analyst – SOC
Analista Blue Team monitorando eventos, ameaças e incidentes em SOC para a It4us Cyber Security. Operação remota com ferramentas SIEM e suporte a clientes.
SOC Analyst II
SOC Analyst II protecting small and medium-sized businesses with enterprise-class cybersecurity. Leading threat investigations, incident response, threat hunting, and vulnerability management.
Manager, Information Security Operations
Information Security Operations Manager leading Malwarebytes’ global Security Operations team. Owning SIEM, incident response, vulnerability management, threat hunting, DLP, and AI security for its cybersecurity business.
Manager, Information Security Operations
Security operations manager leading global SecOps, incident response, and threat management for Malwarebytes cybersecurity and ThreatDown MDR. Building resilient 24x7 protection across distributed teams and systems.
Senior SOC Analyst
Senior SOC Analyst leading high-severity investigations, threat hunting, malware analysis, and forensics. Strengthening detection and response for DeepSeas’ global cybersecurity clients.
SOC Analyst, SIEM Engineer
SOC Analyst/SIEM Engineer monitoring and improving security systems for secupay AG, a German omnichannel payments provider. Investigating incidents and optimizing FortiSIEM detection capabilities.
Security Operations Analyst
Security Operations Analyst monitoring and investigating threats across client environments for Workstreet’s managed security and compliance services. Tuning detections, guiding remediation, and supporting 24x7 SOC coverage.
Security Operations Analyst
Security Operations Analyst monitoring and investigating threats across EDR, SIEM, firewall, IPS, and WAF platforms. Providing actionable incident findings and remediation guidance for Workstreet’s cybersecurity and compliance clients.
Security Operations AI Engineer – Contract
Security Operations AI Engineer securing enterprise AI/ML systems for 66degrees, an AI transformation partner. Building detection pipelines, incident playbooks, and governance controls for emerging AI threats.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing managed security services for Axians Switzerland. Analyzing cyberthreats and operating Microsoft Azure and M365 security environments.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing and operating managed security services for Axians’ Swiss customers. Analyzing cyber threats across Microsoft 365 and Azure environments.
Security Operations Engineer, Microsoft Solutions
Security Operations Engineer operating managed security services across Microsoft 365 and Azure. Analyzing cyber threats and delivering security projects for Axians Schweiz’s digital transformation clients.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing and operating managed security services for Axians’ Swiss cloud and IT customers. Analyzing cyberthreats and delivering Microsoft security projects.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer operating Axians Switzerland’s managed security services. Analyzing cyberthreats and implementing Microsoft-focused security projects across Azure and M365 environments.
SOC Analyst
Information Security & Compliance Analyst maintaining SOC 2, ISO 27001 and Cyber Essentials readiness for SyncEzy’s B2B SaaS integration platform. Owning evidence, controls, risks and audit coordination remotely.
Director, Security Operations Center
Director leading Thrive’s Security Operations Center for cloud, cybersecurity, networking, disaster recovery, and managed services. Overseeing SOC operations, incident response, threat monitoring, and analyst teams.
SOC Analyst
SOC Analyst monitoring security alerts and resolving incidents for Leadtech’s global digital products. Improving vulnerability management and security processes across cross-functional teams.
Global IT Security Operations Lead – Exposure Management
Global security operations leader building incident response, detection, and exposure management capabilities. Protecting aerospace intellectual property, manufacturing uptime, and hybrid IT environments.