Leads daily Security Operations Center activities, including 24/7 monitoring, threat detection, incident investigation, response, and mitigation. Oversees SIEM configuration and optimization, threat intelligence integration, automation, reporting, process improvement, and escalation management. Mentors SOC analysts and engineers, develops playbooks and training, and collaborates with network, cloud security, compliance, and other IT teams to strengthen organizational security operations.

Designs, manages, and optimizes SIEM systems for security monitoring and threat detection. Responsibilities include log ingestion, event correlation, alert tuning, incident triage, threat intelligence integration, automation, reporting, and collaboration with SOC and security teams. The role requires cybersecurity experience, SIEM administration expertise, cloud and network security knowledge, scripting skills, and familiarity with major SIEM platforms and security certifications.