{"id":3746159,"url":"https://alion.io/job/tether-soc-lead-3","title":"SOC Lead","company":{"id":43,"name":"Tether","domain":"tether.to","url":"https://alion.io/company/tether","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Recruitee","truth_index":{"grade":"A","score":96,"open_postings":92,"ghost_share":0,"stale_share":0.141,"repost_share":0,"time_to_fill_p50_days":56,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"remote","remote_scope":"stated_regions","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":["DE","FR","GB","AT","BE","BG","HR","CZ","DK","FI","HU","IE","IT","NL","NO","PL","RO","ES","SE","CH","EE","GR","IS","LV","LI","LT","LU","MT","PT","SK","SI"],"hiring_countries_total":31,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bitcoin","optional":false},{"name":"MITRE ATT&CK","optional":true},{"name":"SIEM","optional":true},{"name":"Telegram","optional":true},{"name":"WhatsApp","optional":true},{"name":"Zero Trust","optional":true}],"status":"closed","first_seen_at":"2026-11-04T10:31:57Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-04T18:27:46Z","board_verified":false,"closed_at":"2026-11-04T18:27:46Z","days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"Join Tether and Shape the Future of Digital Finance\nAt Tether, we’re not just building products, we’re pioneering a global financial revolution. Our cutting-edge solutions empower businesses-from exchanges and wallets to payment processors and ATMs-to seamlessly integrate reserve-backed tokens across blockchains. By harnessing the power of blockchain technology, Tether enables you to store, send, and receive digital tokens instantly, securely, and globally, all at a fraction of the cost. Transparency is the bedrock of everything we do, ensuring trust in every transaction.\nInnovate with Tether\nTether Finance: Our innovative product suite features the world’s most trusted stablecoin, USDT, relied upon by hundreds of millions worldwide, alongside pioneering digital asset tokenization services.\nBut that’s just the beginning:\nTether Power: Driving sustainable growth, our energy solutions optimize excess power for Bitcoin mining using eco-friendly practices in state-of-the-art, geo-diverse facilities.\nTether Data: Fueling breakthroughs in AI and peer-to-peer technology, we reduce infrastructure costs and enhance global communications with cutting-edge solutions like KEET, our flagship app that redefines secure and private data sharing.\nTether Education: Democratizing access to top-tier digital learning, we empower individuals to thrive in the digital and gig economies, driving global growth and opportunity.\nTether Evolution: At the intersection of technology and human potential, we are pushing the boundaries of what is possible, crafting a future where innovation and human capabilities merge in powerful, unprecedented ways.\nWhy Join Us?\nOur team is a global talent powerhouse, working remotely from every corner of the world. If you’re passionate about making a mark in the fintech space, this is your opportunity to collaborate with some of the brightest minds, pushing boundaries and setting new standards. We’ve grown fast, stayed lean, and secured our place as a leader in the industry.\nIf you have excellent English communication skills and are ready to contribute to the most innovative platform on the planet, Tether is the place for you.\nAre you ready to be part of the future?\nAbout the job\nThe SOC Lead is responsible for leading the day-to-day operations of the organization's global follow-the-sun Security Operations Center, ensuring that security events are monitored, investigated, and responded to effectively around the clock. Based in Europe and covering the 08:00-17:00 UTC shift, the SOC Lead manages a distributed team of SOC Analysts across multiple regions and time zones. The role goes beyond supervising a queue: the focus is on setting operational standards, owning the incident response process, driving the quality of investigations and handovers, and continuously improving detection and response capabilities. The ideal candidate combines strong hands-on SOC experience with proven leadership, and thrives in a fast-paced, fully remote setting where accuracy, discipline, and security are essential. Hands-on engineering experience with core security platforms is a big plus.\nResponsibilities\nLead, coach, and develop a distributed team of SOC Analysts working across multiple regions in a follow-the-sun model.\n\nOwn the SOC schedule and shift rotations, including weekend coverage, ensuring continuous coverage across all time zones.\n\nDefine and enforce the shift handover process, so that open investigations, ongoing incidents, and pending actions continue seamlessly around the clock.\n\nAct as the primary escalation point for the team and as incident lead for major security incidents, coordinating triage, analysis, containment, eradication, recovery, and post-incident reviews with relevant teams.\n\nPerform hands-on triage, investigation, and threat hunting alongside the team across the security stack, including SIEM, Endpoint Detection and Response (EDR), Security Service Edge (SSE), and Web Application Firewall (WAF) platforms.\n\nReview the quality of investigations and incident documentation, providing structured feedback and ensuring consistent standards across shifts and regions.\n\nDefine, track, and report SOC metrics and KPIs, such as alert volumes, mean time to detect, mean time to respond, and false positive rates.\n\nDrive the improvement of detection content together with security engineering, prioritizing the tuning of SIEM correlation rules, EDR custom detections, and WAF rules, and mapping coverage to frameworks such as MITRE ATT&CK.\n\nDevelop and maintain technical documentation, standard operating procedures, incident response playbooks, and escalation matrices.\n\nContribute to the hiring, onboarding, and training of new SOC Analysts.\n\nCollaborate with IT, infrastructure, application, and security engineering teams, as well as management, to resolve incidents and support day-to-day operations.\n\nSupport vulnerability management and drive continuous improvement of the organization's overall security posture.\n\nRequirements\nBachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent practical experience).\n\nAt least 5 years of hands-on experience in Security Operations, including at least 1 year as a SOC Lead or in an equivalent team lead role.\n\nProven experience triaging alerts, investigating security incidents, and leading the response to major incidents in a production environment.\n\nSolid working knowledge of core security technologies such as EDR, SSE, SIEM, and WAF, and of how to use them to investigate and respond to threats.\n\nHands-on experience implementing, configuring, and tuning these platforms, or writing and tuning detection content, is a big plus.\n\nExperience leading or working in a 24/7 or follow-the-sun SOC, including managing shift schedules and remote teams across time zones.\n\nStrong experience with incident response and threat hunting, ideally with familiarity with the MITRE ATT&CK framework.\n\nExcellent understanding of network security, endpoint security, cloud security, and Zero Trust principles.\n\nRelevant certifications such as Security+, CySA+, GCIA, GCIH, GSOM, CISSP, or vendor-specific credentials are a plus.\n\nStrong leadership, analytical, troubleshooting, and problem-solving skills with a high attention to detail.\n\nAbility to handle sensitive information responsibly and securely.\n\nExcellent written and verbal communication skills in English, including the ability to report to management and communicate clearly with technical and non-technical stakeholders during incidents.\n\nAbout You\nYou are an experienced SOC practitioner who has moved into leadership without losing your hands-on edge. You know what good triage and investigation look like, and you know how to build a team that delivers them consistently across shifts and time zones. You stay calm during major incidents, communicate clearly with both engineers and management, and make sound decisions under pressure. If you have also stood up or tuned the tools your team relies on, or written your own detections, even better. You are structured, reliable, and comfortable leading a fully remote team, and you enjoy coaching analysts, improving processes, and raising the security bar across the environment.\nImportant information for candidates\nRecruitment scams have become increasingly common. To protect yourself, please keep the following in mind when applying for roles:\nApply only through our official channels. We do not use third-party platforms or agencies for recruitment unless clearly stated. All open roles are listed on our official careers page: https://tether.recruitee.com/\n\nVerify the recruiter’s identity. All our recruiters have verified LinkedIn profiles. If you’re unsure, you can confirm their identity by checking their profile or contacting us through our website.\n\nBe cautious of unusual communication methods. We do not conduct interviews over WhatsApp, Telegram, or SMS. All communication is done through official company emails and platforms.\n\nDouble-check email addresses. All communication from us will come from emails ending in @tether.toor @tether.io\n\nWe will never request payment or financial details. If someone asks for personal financial information or payment at any point during the hiring process, it is a scam. Please report it immediately.\n\nWhen in doubt, feel free to reach out through our official website.","description_format":"text","description_chars":8406,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"region"},{"name":"France","iso":"FR","kind":"region"},{"name":"United Kingdom","iso":"GB","kind":"region"},{"name":"Austria","iso":"AT","kind":"region"},{"name":"Belgium","iso":"BE","kind":"region"},{"name":"Bulgaria","iso":"BG","kind":"region"},{"name":"Croatia","iso":"HR","kind":"region"},{"name":"Czech Republic","iso":"CZ","kind":"region"},{"name":"Denmark","iso":"DK","kind":"region"},{"name":"Finland","iso":"FI","kind":"region"},{"name":"Hungary","iso":"HU","kind":"region"},{"name":"Ireland","iso":"IE","kind":"region"},{"name":"Italy","iso":"IT","kind":"region"},{"name":"Netherlands","iso":"NL","kind":"region"},{"name":"Norway","iso":"NO","kind":"region"},{"name":"Poland","iso":"PL","kind":"region"},{"name":"Romania","iso":"RO","kind":"region"},{"name":"Spain","iso":"ES","kind":"region"},{"name":"Sweden","iso":"SE","kind":"region"},{"name":"Switzerland","iso":"CH","kind":"region"},{"name":"Estonia","iso":"EE","kind":"region"},{"name":"Greece","iso":"GR","kind":"region"},{"name":"Iceland","iso":"IS","kind":"region"},{"name":"Latvia","iso":"LV","kind":"region"},{"name":"Liechtenstein","iso":"LI","kind":"region"},{"name":"Lithuania","iso":"LT","kind":"region"},{"name":"Luxembourg","iso":"LU","kind":"region"},{"name":"Malta","iso":"MT","kind":"region"},{"name":"Portugal","iso":"PT","kind":"region"},{"name":"Slovakia","iso":"SK","kind":"region"},{"name":"Slovenia","iso":"SI","kind":"region"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Cryptocurrencies","Crypto Payments","Stablecoins"],"lifecycle":[{"event":"open","at":"2026-11-04T13:24:38Z"},{"event":"close","at":"2026-11-04T18:27:46Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/tether-soc-lead-3","json_url":"https://alion.io/job/tether-soc-lead-3.json","meta":{"generated_at":"2026-11-06T06:55:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12267,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":43},"rest":"https://alion.io/mcp/rest/get_company?id=43"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftether-soc-lead-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftether-soc-lead-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftether-soc-lead-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tether-soc-lead-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftether-soc-lead-3"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3746159}},{"tool":"search_jobs","arguments":{"company":"tether.to","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3746159},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}