• Oversee daily SOC operations, including alert monitoring, triage, escalation, and incident tracking.

• Lead and mentor SOC analysts, providing guidance on investigations, threat analysis, and response actions.

• Ensure incidents are handled in accordance with SLAs, escalation matrices, and established security procedures.

• Review and validate incident tickets, case notes, and closure details for completeness and accuracy.

• Coordinate with internal teams and external vendors during security incidents and major outages.

• Monitor SOC tools, firewall, email security, and other security platforms for suspicious activity.

• Improve SOC processes, detection rules, playbooks, and reporting to increase efficiency and response quality.

• Prepare and present operational metrics, incident trends, and security reports to management.

• Support incident response activities, including containment, investigation, remediation, and post-incident rev...