What does A Security Operations Center (SOC) Lead do?
A Security Operations Center (SOC) Lead is responsible for leading a security operations centre's day-to-day detection and response function, setting detection strategy, and managing the analyst team through shift rotations and major incidents.
Day-to-day responsibilities
- Overseeing shift rotations and escalation workflows
- Tuning detection strategy across the SIEM
- Leading response during major incidents
- Reporting SOC metrics and risk posture to leadership
Very High demand+15% SOC leadership & shift management+14% Detection engineering strategy+12% Incident command