SOC Team Lead

Advisors, operations, compliance and technology teams total roughly 800 people.

This role opened up after a team member moved internally. Fox Valley Planning Group is hiring for the SOC Team Lead role to monitor, investigate and respond to security alerts across our environment. We need someone who writes up incidents clearly enough that the next shift can pick them up without asking. Employment is through our payroll partner in Australia. Salary is paid monthly in local currency. Expect to work a schedule that overlaps with US Eastern business hours until about noon ET.

Responsibilities

• Report on security awareness training and phishing simulation results.
• Write and update SOC runbooks and playbooks.
• Help with user access reviews and offboarding audits.
• Tune noisy detection rules with the security engineering team.
• Hand off open cases at shift change with clear notes.
• Review firewall, proxy, VPN and authentication logs for suspicious activity.
• Analyse reported phishing emails, check headers and URLs, and purge malicious messages.
• Document incidents with timeline, impact and root cause.

About you

• 7+ years in an SOC, security analyst or IT security role.
• Experience reading Windows Event Logs, Sysmon and Linux logs.
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• Working knowledge of SIEM and EDR tools.

Schedule: Rotating 12-hour shifts on a 2-2-3 schedule, including nights

Pay and benefits

Compensation: $174,000-$220,000 per annum

• Annual salary review.
• Co-working space stipend.
• Monthly internet allowance.
• 24 days paid time off.

Shortlisting will begin immediately.

Applications close when we find the right person, so get in early.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Fox Valley Planning Group.