Security Operations Center Functional Lead

Role Summary 

The Security Operations Center (SOC) Functional Lead is a senior individual contributor who provides functional leadership, technical direction, and operational oversight for SOC capabilities. The role focuses on strengthening threat detection, incident response, and continuous improvement across cybersecurity operations. 

This role requires strong expertise in SOC operations, incident response, detection engineering, and security platforms, along with the ability to influence stakeholders, guide analysts, and deliver scalable operational improvements. 

Core Responsibilities 

• Provide functional leadership and operational coordination for SOC activities 

• Lead high-severity incident response, threat detection, and continuous improvement initiatives 

• Guide analysts, improve playbooks and detection content, and enhance SOC processes and tooling 

• Partner with IT, Risk, Compliance, and business stakeholders to strengthen security posture 

• Track key operational metrics and support governance, risk, and compliance requirements 

Key Requirements 

• Strong expertise in SOC operations, incident response, SIEM/SOAR, and threat detection 

• Ability to provide functional leadership, mentor analysts, and lead cross-functional initiatives 

• Strong communication, stakeholder management, and problem-solving skills 

• Understanding of security frameworks, governance, and compliance requirements 

Education 

• Bachelor’s or Master’s in Cybersecurity, Computer Science, or related field 

Experience 

• 10+ years of experience in cybersecurity, including SOC operations, incident response, and detection engineering 

• Experience in senior individual contributor, technical lead, or functional lead roles 

• Exposure global SOC environment 

Certifications (Preferred) 

• CISSP, CISM, or equivalent 

• GIAC (GCIA, GCED, GCIH) 

• Microsoft SC-200 / AZ-500 or equivalent