SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
As SOC Operations Lead, you are the operational engine of the Security Operations Center. You ensure that SOC service delivery runs smoothly, consistently, and with high quality by developing clear procedures and processes, and supporting the team during escalations and incident response. Working alongside Service Delivery Managers, you guarantee that customers receive the best service.
Your responsibilities include:
- Developing, maintaining, and updating SOC procedures, playbooks, and work instructions, ensuring the team applies them correctly
- Coordinating incident response by monitoring progress, ensuring clear communication, and managing structured handovers to colleagues and customers
- Monitoring KPIs and SLAs (such as MTTD and MTTR), reporting on them, and adjusting as needed
- Sharing responsibility for shift and on-call scheduling to maintain 24/7 service delivery
- Coaching and mentoring SOC analysts functionally, actively sharing knowledge within the team
- Identifying process and tooling improvements, driving automation and service optimization
- Conducting hands-on security incident investigations within Microsoft Sentinel and Microsoft Defender
- Remaining actively involved in investigations alongside your operational role
You will work from the office in Zele.
Requirements:
- Multiple years of experience as a (Senior) SOC Analyst, Incident Responder, or in a similar cybersecurity role
- Experience setting up and improving operational processes and procedures within a SOC or security environment
- Thorough knowledge of the complete incident response lifecycle
- Strong experience with the Microsoft stack (Microsoft Defender / Microsoft Sentinel)
- Strong organizational and structuring skills with process- and solution-oriented thinking
- Strong stakeholder management and clear, persuasive communication with internal and external stakeholders
- Ability to lead and inspire colleagues
- Willingness to work in a 24/7 SOC environment, including on-call participation
- Familiarity with cybersecurity best practices, relevant regulations (NIS2, ISO 27001), and frameworks such as MITRE ATT&CK
- Knowledge of ITIL or other service management frameworks is a plus
