Responsible for building, operating, and continuously improving a 24/7 Security Operations Centre supporting Keyloop’s global technology and business operations.
Own SOC strategy, people, process, and technology, ensuring effective detection, investigation, response, and reporting of cyber security incidents across multiple environments.
Lead Level 2 (L2) analysts, manage an outsourced Managed Service Provider (MSP) for Level 1 (L1) operations.
Act as a key interface between security, IT, engineering, and business stakeholders.
Ensure effective monitoring, detection, triage, investigation, and response to security events and incidents.
Drive continuous improvement of SOC capabilities, coverage, and efficiency through metrics, lessons learned, and automation.
Define and execute a SOC roadmap aligned with business risk, regulatory requirements, and Keyloop’s strategic objectives.
Requirements
8+ years of experience in cyber security, with significant hands-on experience in SOC operations.
Proven experience building, operating, and maturing a 24/7 SOC environment.
Strong experience with SIEM platforms (design, integration, tuning, and operations).
Practical experience implementing and operating SOAR and security automation.
Demonstrated experience defining and executing incident response processes and runbooks.
Hands-on exposure to web, email, endpoint, MDR, and XDR security technologies.
Experience managing SOC analysts and third-party service providers.
Strong understanding of threat intelligence and its operational application.
Demonstrated experience supporting NIST, ISO 27001, and SOC 2 compliance initiatives from a SOC perspective.
Strong people management and coaching skills
Excellent written and verbal communication
Stakeholder management and expectation setting
Negotiation and influence without authority
Ability to translate technical risk into business impact
Structured, delivery-focused approach to executing a security roadmap