SOC Team Lead

Flexera saves customers billions of dollars in wasted technology spend. A pioneer in Hybrid ITAM and FinOps, Flexera provides award-winning, data-oriented SaaS solutions for technology value optimization (TVO), enabling IT, finance, procurement and cloud teams to gain deep insights into cost optimization, compliance and risks for each business service. Flexera One solutions are built on a set of definitive customer, supplier and industry data, powered by our Technology Intelligence Platform, that enables organizations to visualize their Enterprise Technology Blueprint™ in hybrid environments—from on-premises to SaaS to containers to cloud.

We’re transforming the software industry. We’re Flexera. With more than 50,000 customers across the world, we’re achieving that goal. But we know we can’t do any of that without our team.  Ready to help us re-imagine the industry during a time of substantial growth and ambitious plans? Come and see why we’re consistently recognized by Gartner, Forrester and IDC as a category leader in the marketplace. Learn more at flexera.com

Job Description
The Security Operations Centre (SOC) Team Lead will work very closely with the Information Security Manager to help design, implement, and manage corporate security strategy as it pertains to SOC operations. The role will be responsible for both the technical aspect of security event response as well as the improvement and measurement of team performance. Based on the Microsoft security tool stack and supplemented by leading technology providers such as Palo Alto and Tenable, there will be a large landscape of opportunity to drive process improvements and optimise response times.

The ideal candidate will;

• Be experienced with threat detection and response.

• Have expert knowledge in the analysis of potential threats.

• Work alongside the Security Engineering team to build and maintain secure postures.

• Produce automated or manual response playbooks.

• Lead technical workshops with SOC team to expand knowledge and capability.

• Assist with vulnerability remediations.

• Determine new ways to measure team performance and identify areas for improvement.

• Daily management and maintenance of vulnerability monitoring systems

• Daily management and maintenance of security event monitoring

• Support the SOC/Security Analyst team with alert tuning and configuration.

• Have experience managing a SOC team

• Use BI tools to report on SOC operations

• Willingness to be on call and available after hours as needed.

Mandatory Skills:

• Hands-on experience leading a team who work in shifts

• Hands-on experience in reporting on SOC metrics

• Phishing detection & response

• Microsoft Purview DLP & IRM

• Microsoft Sentinel SIEM

• Microsoft Defender for Cloud/Apps, Endpoint, Identity

Desirable:

• Microsoft Security Operations Analyst (SC-200)

• Microsoft Identity and Access Administrator (SC-300)

• Microsoft Security, Compliance, and Identity Fundamentals (SC-900)

• Expertise with PowerBI

• Experience working within global standards and best practices such as ISO27001, CIS Controls and Cyber Essentials

Experience & Qualifications

• Computer Science Degree or substantial equivalent experience

• Relevant industry certifications (MS Security Analyst, MS Compliance, etc).

• Minimum 1 year leading a SOC team

• Minimum 1 year producing SOC team metrics

• Experience managing shift patterns

The successful candidate will have a background in SOC analyst roles like:

• Information Security Analyst with the necessary experience of the technologies listed

• SOC analyst with the necessary experience of the technologies listed.

• Deep Security experience

• Team Lead Specific experience

Who You Are…

Only those that possess the below qualities should apply, maintaining the status quo is not good enough, we are a team of people who are never done, we always strive to improve.

Team Collaborator: Work across internal and external teams of all levels to proactively support the business

Outcome driven: Pursue impactful initiatives that move the needle on SOC operational effectiveness

Effective Communicator: Delivers complex information in a confident and convincing manner, appropriate to a diverse audience.

Inquisitive: A propensity to find out why something is the way it is, look under the covers, see if it can be improved.

Analytical: Gather data from multiple sources, find areas of weakness or under-performance and come up with solutions