Security Operations Center Team Lead

Overview

The Security Operations Center Team Lead (SOC Team Lead) is expected to possess a high level of knowledge and experience in various security domains and technologies. This skillset enables work as part of the Security Operations Center (SOC), providing security monitoring and protection services to our MDR customers. The role acts as a senior technical lead within the SOC, offering mentorship, guidance, and quality assurance on alert analysis and incident response activities, with accountability for maintaining high standards of timeliness and quality during the shift.

Responsibilities

• Support and coordinate daily SOC operations by assisting with work prioritization and ensuring alignment with established SLAs and quality standards.
• Serve as the primary technical escalation point for complex alerts and incident investigations.
• Provide mentorship, guidance, and quality review of analyst work to promote consistency and continuous improvement.
• Facilitate knowledge sharing, including leading discussions, incident reviews, and “lessons learned” sessions.
• Contribute to the professional growth of team members through coaching and technical guidance.
• Identify opportunities to improve operational efficiency and contribute to the design and implementation of enhanced processes and solutions.
• Support the completion of Post Incident Reports (PIRs) and contribute to clear, timely communication during critical incidents.
• Participate in the analysis and response to security alerts and incidents as needed.
• Develop and maintain SOC procedures, runbooks, and operational documentation.
• Support the implementation and evolution of detection standards, processes, and procedures.
• Promote a high standard of client experience through quality‑focused technical delivery.
• Stay current on emerging threats, technologies, and industry best practices.
• Identify opportunities for automation and work with internal teams to integrate improvements into SOC workflows.
• Deliver training sessions and technical enablement activities for SOC analysts.
• Escalate personnel‑related concerns or performance issues to SOC management as appropriate.
• Perform other duties as required or assigned.

Qualifications

• Demonstrated leadership skills in a cross‑functional team environment.
• Strong organizational, presentation, and written/verbal communication abilities.
• Ability to multi‑task, adapt quickly to change, and meet deadlines in a fast‑paced setting.
• Self‑motivated with a track record of providing ongoing coaching, mentorship, and performance feedback.
• Experience liaising with clients, vendors, and partners at all organizational levels.
• Willingness to work occasional evenings, weekends, and on‑call as required.
• Analytical & critical thinking skills to evaluate security alerts, identify patterns, and guide complex investigations using data‑driven, structured problem‑solving approaches.
• Deep technical expertise in SIEM, EDR, SOAR, threat detection methodologies, and incident response frameworks; ability to act as the technical escalation point for advanced detection logic, threat hunting, and containment strategies.
• Shift leadership and quality oversight: direction and coordination of SOC activities during assigned shifts, quality control of alert analysis and incident response, accountability for timeliness and adherence to SLAs, and real‑time guidance to address execution gaps.
• Operational excellence: promotion of SOC processes, SLAs, and quality standards; identification and implementation of workflow, tooling, and detection improvements.
• Mentorship & collaboration: ongoing coaching, constructive feedback, knowledge sharing, and escalation of personnel or administrative concerns to management.
• Bachelor’s degree preferred or equivalent experience.
• 3+ years of experience providing technical leadership, mentorship, or serving as a senior/lead analyst.
• 5+ years of experience in cybersecurity, with senior‑level experience analyzing and responding to alerts from SIEM and EDR platforms.
• Expert knowledge of SIEM, MDR, and related cybersecurity technologies.
• Experience acting as the technical escalation point and leading incident response efforts.
• Programming knowledge is a plus.
• Current security‑relevant certifications from recognized bodies (e.g., CompTIA, ISC², ISACA, SANS).
• Commitment to continuous learning and development of technical knowledge for existing and emerging technologies.
• In‑depth understanding of a broad range of cybersecurity concepts and controls, enabling consultation and solution design for customers.
• Global competences: customer centricity, communication, collaboration, and leadership.

About Konica Minolta

Konica Minolta Business Solutions' journey began over 150 years ago with a vision to see and do things differently. The company partners with clients to “Give Shape to Ideas” by supporting their digital transformation through an expansive Intelligent Connected Workplace portfolio, which includes IT services, intelligent information management, video security solutions, managed print services, and office and industrial/commercial printing technologies. In 2025, Konica Minolta celebrates the 20th anniversary of its production‑print business and the bizhub brand, marking two decades of innovation in office technology. The company is recognized on Forbes 2025 America’s Best Large Employers list, repeatedly appears on CRN’s MSP 500 list, and has earned multiple industry awards for brand loyalty and product excellence. Konica Minolta operates on a North American Shared Services model, aligning cross‑border priorities and enhancing delivery to its field organization by combining U.S. and Canadian service functions across sales administration, logistics, marketing, product planning, finance, IT, HR, and legal.