SOC Team Lead

2 months ago

College Park, United States BlueVoyant Full time

SOC Team Lead


This position is ideally located in College Park, Maryland. Remote US candidates may be considered.


US Citizenship required for this role.


The schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3 days on, 2 days off, 2 days on, 3 days off)


BlueVoyant is looking for Security Operations Center (SOC) Team Lead to help our global customers manage their IT security. You will be part of a fast-paced team that helps customers to reduce the impact of security incidents and ensures that critical business operations continue unhindered.


BlueVoyant SOC Team Leads are the first line leaders tasked with enabling efficient, world-class teams to defend clients from adversaries. As a technical expert and defensive strategist, you’ll be instrumental in guiding analysts through active intrusions, aiding clients in taking action, and building a culture of client-first detection and response.


Key Responsibilities

As a team lead the success of the team relies on your expertise to spot and respond to attacks before adversaries gain a foothold. Your visibility over incoming alerts allows you to spot trends, prioritize analysis work, and define the gold standard of analyst work.


As a Team Lead, you’ll directly supervise analysts on your shift, providing mentorship, workflow assistance, quality and performance reviews, and provide excellent customer service.

  • Supervise and mentor Security Analysts during a standard working team/shift
  • Manage analyst workload and workflows while acting as an escalation point for your team
  • Communicate with BlueVoyant clients throughout incident escalations and lifecycle
  • Supervise operations in deterring, identifying, monitoring, investigating, and analyzing attacks
  • Support analyst alert triage to identify whether appropriate escalations occurred, and monitor for patterns indicating late-stage incident lifecycle alerts requiring incident response
  • Provide quality control and feedback for analyst investigations
  • Participate in the response, investigation, and resolution of security incidents
  • Ensure teams are aware of operating procedures and any changes or additions
  • Aid in keeping operational documentation up to date
  • Provide incident investigation, handling, and response, including incident documentation
  • Serve as the technical escalation point and mentor for your analyst team
  • Perform triage of incoming issues (assess the priority, determine risk)
  • Maintain a strong awareness of the current threat landscape


Basic Qualifications

  1. People Skills:
  • Strong teamwork and interpersonal skills, including the ability to work effectively with a globally distributed team
  • Able and willing to work in a 24/7/365 environment, including nights and weekends, on a rotating shift schedule
  • Experience managing technical individual contributors, including providing feedback, monitoring quality, and prioritizing work
  • Strong customer communications skills, including articulating complex or urgent technical data and scenarios to non-technical audiences
  • Ability to handle high pressure situations in a productive and professional manner.
  1. Tech Skills:
  • Knowledge of and experience with intrusion detection/prevention systems and SIEM software
  • Advanced knowledge and understanding of network protocols and devices.
  • Advanced experience with Mac OS, Windows, and Unix systems.
  • Ability to analyze event logs and recognize signs of cyber intrusions/attacks
  • Advanced written and verbal communication skills and the ability to present complex technical topics in clear and easy-to-understand language
  • Familiarity with tools such as Malware Sandboxes, Sentinel, Splunk, EDR solutions
  • Strong knowledge of the following:
  • Enterprise Cloud Solutions (Azure, GCP, AWS)
  • Modern authentication systems and attacks (SSO, OATH, Entra, etc.)
  • SIEM workflows (preferably Sentinel and Splunk)
  • Packet Analysis
  • Malware Detection, to include dynamic and light static analysis
  • Network Monitoring metadata (web logs, firewall logs, WAF/IDS)
  • Email Security and common business email compromise attacks
  • Vulnerability Identification and correlation to attacker behavior


Preferred Qualifications

  • Experience in network/host vulnerability analysis, intrusion analysis, digital forensics, penetration testing, or related areas
  • 5+ years of hands-on SOC/TOC/NOC experience
  • GCIA and/or GCIH required. GCFA, GCFE, CISSP, Security +, Network +, CEH, RHCA, RHCE, MCSA, MCP, or MCSE preferred
  • Familiarity with technologies such as Sentinel, Splunk, Microsoft Defender suites, Crowdstrike Falcon, SentinelOne
  • Familiarity with Group Policy, Intune, Virtualization, and other IT Infrastructure tools
  • Understanding and/or experience with one or more of the following programming languages: JavaScript, Python, Lua, Ruby, GoLang, Rust


Education

  • Minimum bachelor’s degree in Information Security, Computer Science, or other IT-related field or equivalent experience


About BlueVoyant

At BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem. Accuracy Actionability Timeliness Scalability

Led by CEO, Jim Rosenthal, BlueVoyant’s highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies.

Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America.

All employees must be authorized to work in the United States. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.

Disclaimer: Please note that pursuant to contractual requirements and applicable law, in order for employees to perform work on some of the company’s federal contracts, U.S. citizenship is required. Accordingly, an employee’s ability to perform work on such contracts is contingent upon the company’s verification of the employee’s citizenship status. Furthermore, individuals may be subject to additional background checks and fingerprinting.

  • SOC Team Lead

    5 months ago

    College Park, United States BlueVoyant Full time

    SOC Team Lead This position is ideally located in College Park, Maryland. Remote US candidates may be considered. US Citizenship required for this role. The schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2...

  • SOC Team Lead

    4 weeks ago

    College Park, United States BlueVoyant Full time

    SOC Team Lead This position is ideally located in San Antonio, Texas. Remote US candidates may be considered. US Citizenship required for this role. The schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days...

  • SOC Operations Lead

    2 days ago

    College Park, Maryland, United States BlueVoyant Full time

    Job Summary">BlueVoyant is looking for highly skilled Cyber Security Analysts to join our SOC team.">Responsibilities and Qualifications">Monitor and analyze security events and alerts from multiple sources, including SIEM logs, endpoint logs, and EDR telemetry.You should have experience with intrusion analysis / incident response, digital forensics,...

  • SOC Operations Expert

    4 weeks ago

    College Park, Maryland, United States BlueVoyant Full time

    About the JobWe are seeking a highly skilled SOC Operations Expert to join our team at BlueVoyant. As a key member of our SOC, you will play a critical role in helping our global customers manage their IT security and reduce the impact of security incidents.The ideal candidate will have excellent teamwork skills, knowledge of intrusion detection/prevention...

  • SOC Security Analyst L2

    3 weeks ago

    College Park, United States BlueVoyant Full time

    SOC Security Analyst L2 The requirement has been updated to work out of the College Park, Maryland office 2 - 3 days per week as well as the Panama schedule as follows: (slow rotating shift pattern that uses 4 teams and two 12 hour-shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3 days on, 2 days...

  • SOC Security Analyst 2

    2 days ago

    College Park, United States BlueVoyant Full time

    SOC Security Analyst L2Location: The requirement has been updated to work out of the College Park, Maryland office 2 - 3 days per weekShift Requirement: Panama schedule as follows: (slow rotating shift pattern that uses 4 teams, and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3...

  • SOC Security Analyst 2

    1 day ago

    College Park, United States BlueVoyant Full time

    SOC Security Analyst L2Location: The requirement has been updated to work out of the College Park, Maryland office 2 - 3 days per weekShift Requirement: Panama schedule as follows: (slow rotating shift pattern that uses 4 teams, and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3...

  • SOC Security Analyst 2

    2 days ago

    College Park, United States BlueVoyant Full time

    SOC Security Analyst L2Location: The requirement has been updated to work out of the College Park, Maryland office 2 - 3 days per weekShift Requirement: Panama schedule as follows: (slow rotating shift pattern that uses 4 teams, and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3...

  • SOC Security Analyst L2

    2 weeks ago

    College Park, United States BlueVoyant Full time

    SOC Security Analyst L2 Location: The requirement has been updated to work out of the College Park, Maryland office 2 - 3 days per week Shift Requirement: Panama schedule as follows: (slow rotating shift pattern that uses 4 teams, and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern:  2 days on, 2 days off,...

  • SOC Security Analyst L2

    3 weeks ago

    College Park, United States BlueVoyant Full time

    SOC Security Analyst L2 The requirement has been updated to work out of the College Park, Maryland office 2 - 3 days per week as well as the Panama schedule as follows:  (slow rotating shift pattern that uses 4 teams and two 12 hour-shifts to provide 24/7 coverage.  The working and non-working days follow this pattern:  2 days on, 2 days off, 3 days on, 2...

  • SOC Security Analyst L2

    1 week ago

    College Park, United States BlueVoyant Full time

    Job DescriptionJob DescriptionSOC Security Analyst L2Location: The requirement has been updated to work out of the College Park, Maryland office 2 - 3 days per weekShift Requirement: Panama schedule as follows: (slow rotating shift pattern that uses 4 teams, and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this...

  • SOC Security Analyst

    7 days ago

    College Park, United States BlueVoyant Full time

    SOC Security Analyst (Level 2)The preference is hybrid out of College Park, Maryland but remote US based candidates will be considered. Either way, the schedule will be a Panama schedule: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off,...

  • Cybersecurity Team Manager

    4 weeks ago

    College Park, Maryland, United States BlueVoyant Full time

    About the JobEstimated salary: $120,000 - $180,000 per year.Job Description:BlueVoyant is seeking a highly skilled Cybersecurity Team Manager to join our team. As a SOC Team Lead, you will be responsible for leading a team of security analysts in identifying and mitigating cyber threats. The ideal candidate will have a strong background in IT security,...

  • SOC Security Analyst

    1 month ago

    College Park, United States BlueVoyant Full time

    SOC Security Analyst (Level 2) The preference is hybrid out of College Park, MD or San Antonio, Texas but remote US based candidates will be considered.  Either way, the schedule will be a Panama schedule:  (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: ...

  • SOC Security Analyst L3

    1 week ago

    College Park, United States BlueVoyant Full time

    Job DescriptionJob DescriptionSOC Security Analyst L3Location: The requirement has been updated to work out of the College Park, Maryland office 2 - 3 days per weekShift Requirement: Panama schedule as follows: (slow rotating shift pattern that uses 4 teams, and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this...

  • SOC Security Analyst L3

    2 weeks ago

    College Park, United States BlueVoyant Full time

    SOC Security Analyst L3The requirement has been updated to work out of the College Park, Maryland office 2 - 3 days per week as well as the Panama schedule as follows: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3 days on, 2 days...

  • SOC Security Analyst L3

    2 weeks ago

    College Park, United States BlueVoyant Full time

    SOC Security Analyst L3The requirement has been updated to work out of the College Park, Maryland office 2 - 3 days per week as well as the Panama schedule as follows: (slow rotating shift pattern that uses 4 teams and two 12-hour shifts to provide 24/7 coverage. The working and non-working days follow this pattern: 2 days on, 2 days off, 3 days on, 2 days...

  • Cybersecurity Threat Response Specialist

    3 weeks ago

    College Park, Maryland, United States BlueVoyant Full time

    Job Summary:BlueVoyant seeks an experienced Cybersecurity Threat Response Specialist to lead our global SOC team in detecting, analyzing, and responding to advanced cyber threats. This is a challenging role that requires technical expertise, leadership skills, and a passion for staying ahead of emerging threats.About the Role:As a Cybersecurity Threat...

  • Office Team Lead

    4 weeks ago

    College Park, United States One Medical Full time

    About Us One Medical is a primary care solution challenging the industry status quo by making quality care more affordable, accessible and enjoyable. But this isn’t your average doctor’s office. We’re on a mission to transform healthcare, which means improving the experience for everyone involved - from patients and providers to employers and health...

  • Team Lead Opportunity

    4 weeks ago

    College Park, Maryland, United States SEOULSPICE Full time

    Company OverviewAt SEOULSPICE, we share food, culture, and hospitality that's Korean at heart. We believe in a better place to work with a clear career path. Our food is made from scratch, every day, and 100% gluten-free. We're guided by our Korean values to better our lives with one another.Job DescriptionWe are looking for a skilled Team Lead to support...