{"id":2091791,"url":"https://alion.io/job/civica-security-operations-centre-team-leader","title":"Security Operations Centre Team Leader","company":{"id":8530,"name":"Civica","domain":"civica.com","url":"https://alion.io/company/civica","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":100,"open_postings":6,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":44,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Leadership","role_family":"Leadership","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vadodara, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":28000,"max_usd":74000,"period":"year","method":"role_seniority_country_cell","sample_n":34},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cyber Kill Chain","optional":false},{"name":"Elastic SIEM","optional":false},{"name":"IBM QRadar","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-08T14:51:08Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-24T15:32:16Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"We’re Civica and we make software that helps deliver critical services for citizens all around the world. From local to state government, to education, to health and care, over 5,000 public bodies across the globe use our software to help provide critical services to over 100 million citizens.\nOur aspiration is to be a GovTech champion everywhere we work around the globe, supporting the needs of citizens and those that serve them every day. Building on 21 years of continuous growth and success, we're at a pivotal point on our journey to realise that aspiration.\nAs a company, we’re passionate about what we do and the citizens we help to serve. If you too would like to help champion the use of technology in public services, to improve outcomes for citizens and public sector organisations, then Civica is the right place for you. We will help you unlock the best version of yourself, achieve growth in your career whilst making a real difference to people and communities.\nWhy you'll love this role as a SOC Team Leader at Civica\nIf you're passionate about cyber security, thrive on solving complex threats, and enjoy developing high-performing teams, this is the perfect opportunity for you. As our SOC Team Lead, you'll combine hands-on technical expertise with leadership responsibility, playing a pivotal role in protecting our customers and business.\nIn this role, you'll lead from the front, acting as the senior technical authority for incident response, guiding Security Analysts through complex investigations, and driving operational excellence across the SOC. You'll have the opportunity to mentor and develop junior analysts, shape security processes, and continuously elevate the capability of the team.\nUnlike purely managerial positions, you'll remain deeply involved in the technical work, dedicating part of your time to Level III SOC Analyst responsibilities. This means you'll be actively investigating sophisticated threats, responding to critical incidents, and working with cutting-edge security technologies alongside your team.\nYou'll enjoy a collaborative environment where your expertise is valued, your leadership makes a visible impact, and your contributions directly strengthen our security posture while helping others grow their careers in cyber security.\nYour key responsibilities include:\nLead, coach, and support a team of SOC Analysts to deliver high-quality security operations.\nAct as the senior escalation point for complex security incidents and investigations.\nEnsure operational excellence through quality reviews, feedback, and continuous improvement.\nDrive analyst capability development through mentoring and knowledge sharing.\nMaintain and enhance SOC processes, procedures, and incident response playbooks.\nLead proactive threat hunting and support the assessment of emerging threats and vulnerabilities.\nCollaborate with internal security teams and business stakeholders to support effective threat management and remediation.\nContribute to SOC operations by performing Level III Analyst responsibilities alongside the team.\nRequirements\nWhat you will need to be successful in this role\n5+ years of hands-on experience in a Security Operations Centre (SOC) environment, with demonstrated experience in incident response.\nProven experience in a senior or lead analyst role, with a passion for mentoring others.\nDeep technical expertise with core security technologies, including SIEM (e.g., Elastic SIEM, Splunk, Sentinel, QRadar), EDR, and network security tools.\nStrong understanding of incident response methodologies, cyber kill chain, and frameworks like the MITRE ATT&CK® framework.\nExcellent analytical, critical thinking, and problem-solving skills, with the ability to perform calmly under pressure.\nStrong communication skills, capable of clearly explaining complex technical issues to team members.\nNice to Haves:\nProfessional cybersecurity certifications such as GIAC (GCIH, GCFA), CISSP, OSCP etc.\nExperience with scripting or automation (e.g., Python, PowerShell) to improve SOC efficiency. \nExperience working in a Managed Security Service Provider (MSSP) environment. \nExperience with security orchestration, automation, and response (SOAR) platforms. \nKnowledge of cybersecurity standards related to incident response, such as NIST SP800-61r1, SP800-61r2, SANS PICERL, etc.\nExposure and good working knowledge supporting LANs/WLANs \nExperience in operationalizing and developing SOC specific processes (procedures, work instructions, etc.). \nPrevious experience with raw log file review, data correlation, and analysis, as well as with network security tools, network traffic analysers, firewall logs, network flows, intrusion detection systems, system logs, memory dumps, vulnerability management, SOAR platforms, SIEM, especially Elastic SIEM, and other Enterprise / Open Source equivalents.\nPrevious experience in malware investigations, incident response, and threat hunting \nBenefits\nWhy you'll love working with us.\nWe know that when our people are happy, they will work better and have greater work satisfaction. Here's what you can expect:\nWe're all different - and we love this about us.\nWe provide an inclusive, safe, and welcoming environment to all Civicans - there are heaps of opportunities to enable you to grow and be your best.\nGiving culture - we encourage you to \"give back\" with benefits such as our Days of Difference leave where you can volunteer for a charity of your choice.\nFlexible Work - we have comprehensive flexibility options including part-time work, adjusted hours, staggered shifts, and hybrid or remote working, supporting work-life balance based on individual needs.\nApply for this job - Become part of something special Do you see yourself in this role? If so, then we would love to hear from you.","description_format":"text","description_chars":5806,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Digital Government","Incident Response","Managed IT Services (MSP)"],"lifecycle":[{"event":"open","at":"2026-10-08T14:51:08Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":0.9,"age_days":15,"expected_fill_days":44,"reasons":["conf:3","velocity","win:mid"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/civica-security-operations-centre-team-leader","json_url":"https://alion.io/job/civica-security-operations-centre-team-leader.json","meta":{"generated_at":"2026-10-24T17:48:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25975,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8530},"rest":"https://alion.io/mcp/rest/get_company?id=8530"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcivica-security-operations-centre-team-leader"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcivica-security-operations-centre-team-leader"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcivica-security-operations-centre-team-leader"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/civica-security-operations-centre-team-leader\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcivica-security-operations-centre-team-leader"}]}