Role: Onsite SOC/Incident Response Lead

Location: Fort Worth, TX- Hybrid

Job type: Contract to hire

We are seeking a dynamic and experienced Onsite SOC/Incident Response (IR) Lead to oversee and enhance Security Operations Center (SOC) operations for our client organization in Fort Worth, TX. In this role, you will lead cybersecurity incident response efforts, supervise SOC activities delivered through a Global Cyber Fusion Center, and drive the continuous improvement of the client’s security posture.

Key Responsibilities:

• Leadership and Supervision:
• Provide hands-on leadership to the SOC team, ensuring efficient, effective, and seamless daily operations.
• Manage and mentor SOC analysts to enhance their threat detection and response capabilities.

Incident Response:

• Lead onsite incident response efforts, including investigation, containment, eradication, and recovery.
• Conduct thorough root-cause analyses and provide detailed post-incident reporting.
• Develop and implement robust incident response plans to address and mitigate cybersecurity incidents.

SOC Optimization :

• Regularly review and refine SOC processes, procedures, and technologies to ensure optimal performance.
• Develop roadmaps and strategic initiatives to improve the client’s cyber defense maturity.
• Monitor and analyze incident trends, leveraging insights to enhance SOC operations.

Collaboration and Reporting :

• Work closely with cross-functional teams, including IT, legal, and management, to coordinate incident response efforts.
• Generate detailed reports on SOC performance, key metrics, and incident trends for management review.

Continuous Improvement:

• Stay updated on emerging cybersecurity threats, vulnerabilities, and best practices.
• Ensure compliance with regulatory standards and industry frameworks.

Qualifications :

Experience :

• 5–10 years of professional experience in a Security Operations Center (SOC).
• At least 5 years in a leadership role within a global cybersecurity function.
• Proven expertise in SOC operations, incident response, and metric-driven management.
• Experience managing analysts with varied skill sets in a global service model supporting U.S. clients across time zones.

Technical Skills:

• Proficiency in Microsoft security tools, including Sentinel, MDE, and DLP operations.
• In-depth knowledge of cyber defense tools and frameworks (e.g., SIEM, UEBA, TIP, SOAR, ASM, EDR, NDR).

Education and Certifications :

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field.

Preferred certifications:

• CISSP (Certified Information Systems Security Professional)
• GCIH (Certified Incident Handler) or equivalent
• Microsoft Security Certification