- Lead and manage a team of SOC analysts, including training, development, and performance evaluation
- Develop, implement, and maintain security policies and procedures for the SOC
- Oversee the daily operations of the SOC, including security monitoring, incident response, and threat analysis
- Manage and optimize SOC tools and technologies (SIEM, IDS/IPS, etc.)
- Lead incident response efforts, including investigation, containment, eradication, and recovery
- Interact with the client to understand their infrastructure and implement appropriate technologies to ensure receipt of the log data and then monitor / alert the client for any issue