SOC Lead

We are a small community bank where the loan officer and the branch manager are often the same person. Founded in 1981, we now have 29 employees. Most lenders have lived in the area for decades and know their borrowers.

First Highland Bank has an opening for an SOC Lead. We need someone who writes up incidents clearly enough that the next shift can pick them up without asking. This role is fully remote within the US. You get a company laptop and a headset before you start.

Responsibilities:

• Help with user access reviews and offboarding audits.
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint.
• Escalate confirmed incidents and follow the incident response plan.
• Check threat intelligence feeds and IOCs against our environment.
• Pull evidence for SOC 2, PCI DSS or HIPAA audit requests.
• Document incidents with timeline, impact and root cause.
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM.
• Tune noisy detection rules with the security engineering team.

About you:

• 7+ years in an SOC, security analyst or IT security role.
• Working knowledge of SIEM and EDR tools.
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• Must be able to pass a background check.
• Clear written communication for incident tickets and reports.
• Experience reading Windows Event Logs, Sysmon and Linux logs.

Benefits:

Salary range: $163,000 - $183,000 per year

• Health, dental and vision coverage starting on day one.
• 401(k) with a 100% match up to 5%.
• Three weeks of PTO to start.
• Gym membership reimbursement.
• Employee assistance program.
• $1,000 home office setup budget.
• Profit sharing.

This position requires a background check.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at First Highland Bank.