Security Operations Center Team Lead

About the role

The Security Operations Center Team Lead (SOC Team Lead) is expected to possess a high level of knowledge and experience in various security domains and technologies. This skillset enables them to work as part of the Security Operations Center (SOC), providing security monitoring and protection services to our MDR customers. They will act as a senior technical lead within the SOC, providing mentorship, guidance, and quality assurance on alert analysis and incident response activities, with accountability for maintaining high standards of timeliness and quality during their shift.

Responsibilities

• Support and help coordinate daily SOC operations by assisting with work prioritization and ensuring alignment with established SLAs and quality standards.
• Serve as the primary technical escalation point for complex alerts and incident investigations.
• Provide mentorship, guidance, and quality review of analyst work to promote consistency and continuous improvement.
• Facilitate knowledge sharing, including leading discussions, incident reviews, and “lessons learned” sessions.
• Contribute to the professional growth of team members through coaching and technical guidance.
• Identify opportunities to improve operational efficiency and contribute to the design and implementation of enhanced processes and solutions.
• Support the completion of Post Incident Reports (PIRs) and contribute to clear, timely communication during critical incidents.
• Participate in the analysis and response to security alerts and incidents as needed.
• Develop and maintain SOC procedures, runbooks, and operational documentation.
• Support the implementation and evolution of detection standards, processes, and procedures.
• Promote a high standard of client experience through quality‑focused technical delivery.
• Stay current on emerging threats, technologies, and industry best practices.
• Identify opportunities for automation and work with internal teams to integrate improvements into SOC workflows.
• Deliver training sessions and technical enablement activities for SOC analysts.
• Escalate personnel‑related concerns or performance issues to SOC management as appropriate.
• Perform other duties as required or assigned.

Qualifications

• Ability to exhibit leadership skills in a cross‑functional team.
• Strong organizational, presentation, and written/verbal communication skills.
• Capacity to multi‑task, adapt quickly to changes, and meet deadlines in a fast‑paced environment.
• Self‑motivated with a focus on coaching, mentorship, and performance feedback.
• Experience liaising with clients, vendors, and partners at all organizational levels.
• Willingness to work occasional evenings, weekends, and on‑call as required.
• Analytical & critical thinking: strong ability to evaluate security alerts, identify patterns, and guide complex investigations using data‑driven, structured problem‑solving.
• Technical expertise: deep knowledge of SIEM, EDR, SOAR, threat detection methodologies, and incident response frameworks; ability to act as technical escalation point for advanced detection logic, threat hunting, and containment.
• Shift leadership & quality oversight: direction and coordination of SOC activities during assigned shifts, quality control of alert analysis and incident response, accountability for timeliness and adherence to standards.
• Operational excellence: promote adherence to SOC processes, SLAs, and quality standards; drive workflow, tooling, and detection capability improvements.
• Mentorship & collaboration: ongoing coaching, constructive feedback, and knowledge‑sharing to foster a high‑performance SOC environment.
• Bachelor’s degree preferred or equivalent experience.
• 3+ years’ experience providing technical leadership, mentorship, or acting as a senior/lead analyst.
• 5+ years’ experience in the cyber security field, with senior‑level experience analyzing and responding to alerts from SIEM & EDR platforms.
• Expert knowledge in SIEM, MEDR, and related cybersecurity technologies.
• Experience acting as the technical escalation point for the team and leading incident response efforts.
• Programming language knowledge is a plus.
• Current security‑relevant certifications from an industry‑accepted body (e.g., CompTIA, ISC², ISACA, SANS).
• Ongoing commitment to learning and developing technical knowledge for existing and new technologies.
• In‑depth knowledge of a diverse range of cybersecurity concepts and controls, enabling consultation and solution design for customers.
• Global competences: customer centricity, communication, collaboration, leadership.

About Konica Minolta

Konica Minolta Business Solutions' journey started more than 150 years ago, with a vision to see and do things differently. The company partners with clients to “Give Shape to Ideas” by supporting their digital transformation through an expansive Intelligent Connected Workplace portfolio, which includes IT services, intelligent information management, video security solutions, managed print services, and office/industrial/commercial printing technologies.

2025 marks Konica Minolta’s 20th anniversary in production print, celebrating “20 Years of Excellence, Innovation and Impact,” and the 20th anniversary of the bizhub brand, which has revolutionized office technology over the past two decades.

The company is recognized on Forbes 2025 America’s Best Large Employers list, repeatedly on CRN’s MSP 500 list, and as the #1 brand for customer loyalty in the MFP office copier market by Brand Keys for eighteen consecutive years. It has also received Keypoint Intelligence’s BLI awards for A3 Line of the Year (2021, 2025) and Most Colour Consistent A3 Brand (2021‑2023).

Konica Minolta operates on a North American Shared Services model, aligning cross‑border priorities and enhancing delivery to its field organization by combining service functions in the U.S. and Canada.