SOC Team Lead

Bluffhill Labs is a small team of former military and law enforcement analysts doing pen tests and incident response. We are 17 people, all hands-on, and the founders still run engagements themselves.

Bluffhill Labs is hiring an SOC Team Lead for our Karachi location. We need someone who writes up incidents clearly enough that the next shift can pick them up without asking. The Risk and Compliance team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. This is a hybrid role. Most of the team is in the Karachi office Tuesday to Thursday.

Main duties

• Hand off open cases at shift change with clear notes
• Help with user access reviews and offboarding audits
• Escalate confirmed incidents and follow the incident response plan
• Check threat intelligence feeds and IOCs against our environment
• Report on security awareness training and phishing simulation results

Skills and experience

• 8-10 years in an SOC, security analyst or IT security role
• Experience reading Windows Event Logs, Sysmon and Linux logs
• Ability to work shifts, including some nights, weekends or holidays as scheduled
• Basic scripting in PowerShell or Python
• Must be able to pass a background check
• Familiarity with the MITRE ATT&CK framework

Nice to have

• Malware analysis in a sandbox
• SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines

Schedule: Monday to Friday, 8:00 AM to 5:00 PM, with occasional after-hours escalations

What you get

Compensation: PKR 225,000 - PKR 260,000 per month

• Medical insurance
• Provident fund
• Paid leave
• Hybrid working
• Two bonuses a year
• Fuel allowance

We are reviewing applications as they arrive, so apply early.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Bluffhill Labs.