SOC Lead

Enterprise clients outsource service desk, end-user support and data center operations to us under multi-year contracts. We operate two 24/7 network operations centers and a security operations center, staffed in three shifts.

Role overview:

Our team is growing and we are hiring an SOC Lead. The SOC team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. Fully remote. You can work from anywhere in the US. We send you a laptop and the accessories you need on day one.

Key responsibilities:

• Write and update SOC runbooks and playbooks.
• Pull evidence for SOC 2, PCI DSS or HIPAA audit requests.
• Review firewall, proxy, VPN and authentication logs for suspicious activity.
• Check threat intelligence feeds and IOCs against our environment.
• Escalate confirmed incidents and follow the incident response plan.
• Document incidents with timeline, impact and root cause.

Required qualifications:

• 8+ years in an SOC, security analyst or IT security role.
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• Ability to work shifts, including some nights, weekends or holidays as scheduled.
• Working knowledge of SIEM and EDR tools.
• Familiarity with the MITRE ATT&CK framework.
• Must be able to pass a background check.

Expected salary range: $180,000-$230,000 annually, plus bonus eligibility.

What we offer:

• Health savings account (HSA) with employer contribution.
• 401(k) with a 100% match up to 5%.
• Paid parental leave.
• Vision insurance.

Steading IT is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

Applicants must be authorized to work in the U.S.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Steading IT Inc..