Security Operations Center Lead/SOC Lead

POSITION OVERVIEW

The Regional Security Operations Center (RSOC) Lead supports and oversees Regional Security Operations Centers (RSOC). This role aids the SOC Manager in coordinating cybersecurity efforts, managing daily operations, and enhancing the SOC's capability to detect, prevent, and respond to security threats.

SKILLS REQUIRED

• Experience Required: 1-3 years of experience in a SOC, cybersecurity, or IT operations role.
• Education Preferred: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Relevant certifications: E.G., CompTIA Security+, CISSP, CISM are a plus.

OPERATIONAL SUPPORT

Aid with daily security operations, ensure consistent communication, and effectively respond to emerging threats across all SOCs in the region. Support the implementation of cybersecurity policies, procedures, and incident response protocols. Coordinate resources and activities among regional SOCs to standardize and enhance security operations.

INCIDENT RESPONSE AND THREAT MONITORING

Monitor and respond to security events in collaboration with the regional SOC teams, ensuring timely containment, investigation, and remediation of incidents. Analyze security incidents to determine root causes, impacts, and resolution strategies. Coordinate with regional IT and security staff to facilitate a cohesive response to security threats.

TRAINING AND MENTORSHIP

Mentor and train community college students involved in SOC operations, fostering a learning environment and developing essential cybersecurity skills. Conduct hands-on training sessions and workshops for students and staff to improve their cybersecurity skills.

DOCUMENTATION AND REPORTING

Prepare reports and documentation related to SOC activities, including incident response logs, weekly updates, and monthly operational reports. Maintain accurate records of security incidents, resolutions, and operational metrics to inform continuous improvement.

COLLABORATION AND RELATIONSHIP MANAGEMENT

Serve as a point of contact between the SOC Manager, community college stakeholders, and regional IT/security staff. Participate in regular SOC meetings, regional cybersecurity initiatives, and interdepartmental coordination to maintain alignment across all operations. Strong knowledge of cybersecurity principles, threat analysis, and incident response. Familiarity with SIEM tools, firewalls, and other security technologies. Excellent communication and organizational skills, with the ability to work collaboratively with diverse teams. Strong problem-solving skills and attention to detail. Ability to travel between community college SOC locations across the State.

Must reside in Arizona since this is a hybrid role. This position requires limited traveling (10%) to regional SOCs.