SOC Lead - SIEM/SOAR
First seen by Alion on Oct 29, 2026.
Job Summary :
We are looking for an experienced and dynamic SOC Lead with strong pre-sales and technical leadership capabilities to oversee our Security Operations Center (SOC) and support business growth initiatives.
The ideal candidate should be hands-on with security operations while being equally comfortable working closely with clients, participating in RFPs, solution design, and presenting our cybersecurity offerings.
Key Responsibilities :
1. SOC Operations & Leadership :
- Lead and manage day-to-day operations of the Security Operations Center (SOC) team (L1/L2/L3).
- Monitor security events, alerts, and incidents; coordinate investigation and response activities.
- Develop and maintain standard operating procedures, use cases, and playbooks.
- Ensure SLA adherence, incident tracking, RCA documentation, and continuous improvement.
- Guide the team in threat hunting, incident response, and forensic investigations.
- Implement and optimize SIEM/SOAR platforms and threat intelligence integration.
2. Pre-Sales & Solutioning :
- Collaborate with sales and account teams to engage with customers during pre-sales activities.
- Own technical discussions, client presentations, and solution demonstrations.
- Design and propose managed security service solutions tailored to customer needs.
- Respond to RFPs, RFIs, and build solution documents with pricing support.
- Map client requirements with SOC capabilities and draft high-level architecture/design.
3. Collaboration & Reporting :
- Interface with internal stakeholders (sales, delivery, marketing) to align SOC services to client goals.
- Mentor junior team members and upskill the SOC team on the latest tools and threats.
- Prepare and deliver dashboards, reports, and presentations to clients and leadership.
Required Skills :
- Proven experience leading SOC teams and managing end-to-end security operations.
- Strong knowledge of SIEM, SOAR, EDR, XDR, threat intelligence, and incident response frameworks.
- Hands-on experience with tools like Splunk, IBM QRadar, Sentinel, CrowdStrike, etc.
- In-depth understanding of security standards (MITRE ATT&CK, NIST, ISO 27001).
- Excellent communication and presentation skills for customer interaction.
- Experience in preparing technical proposals, effort estimation, and solution pricing.
Preferred Qualifications :
- Bachelor's/Master's in Computer Science, Cybersecurity, or related field.
- Relevant certifications such as CISSP, CISM, CEH, or equivalent.
- Pre-sales experience with MSSP or cybersecurity consulting firms is highly desirable.
Skills
Information Security, Security Operations Center, SIEM, SOAR, Splunk, Sentinel, Crowdstrike, NIST, QRadar, Security