Security Operations Center Team Lead

Konica Minolta Business Solutions, U.S.A., Inc.•Philadelphia, PA

About The Position

The Security Operations Center Team Lead (SOC Team Lead) is expected to possess a high level of knowledge and experience in various security domains and technologies. This skillset will enable them to work as part of the Security Operations Center (SOC), providing security monitoring and protection services to our MDR customers. They will act as a senior technical lead within the SOC, providing mentorship, guidance, and quality assurance on alert analysis and incident response activities, with accountability for maintaining high standards of timeliness and quality during their shift.

Requirements

Ability to exhibit leadership skills in a cross-functional team
Strong organizational, presentation, communication (written and verbal) skills
Ability to multi-task and adapt to changes quickly and meet deadlines
Self-motivated with the ability to work in a fast-paced environment
Ability to provide team with on-going coaching, mentorship and performance feedback
Ability to liaise with clients, vendors and partners at all levels of the organization
Occasional evenings, weekend and on-call work as required.
Ability to work with a variety of challenging clients.
Demonstrates strong analytical skills to evaluate security alerts, identify patterns, and guide the team through complex investigations.
Applies structured problem‑solving approaches during incidents, ensuring decisions are data‑driven and aligned with SOC best practices.
Possesses deep knowledge of SIEM, EDR, SOAR, threat detection methodologies, and incident response frameworks.
Acts as the technical escalation point, providing guidance on advanced detection logic, threat hunting, and containment strategies.
Provides direction and coordination of SOC activities during assigned shifts to ensure efficient and effective operations.
Performs quality control on alert analysis and incident response to ensure adherence to established standards and SLAs.
Holds accountability for the quality and timeliness of work produced during the shift.
Identifies gaps in execution and provides real-time guidance and corrective feedback.
Promotes adherence to SOC processes, SLAs, and quality standards.
Identifies and drives improvements in workflows, tooling, and detection capabilities to enhance efficiency and effectiveness.
Provides ongoing mentorship, coaching, and constructive feedback to analysts to improve technical capability and consistency.
Supports knowledge sharing and contributes to a collaborative, high-performance SOC environment.
Escalates personnel-related concerns, performance issues, or administrative matters to SOC management as appropriate.
Bachelor’s Degree preferred or equivalent experience
3+ years’ experience providing technical leadership, mentorship, or acting as a senior/lead analyst
5 plus years’ experience in the Cyber Security field, with senior level experience analyzing and responding to alerts from a SIEM & EDR platform.
Expert knowledge in SIEM, MEDR, and Cybersecurity related technologies.
Experience acting as the technical escalation point for the team.
Experience leading incident response efforts.
Current security-relevant certifications from an industry accepted certification body, such as CompTIA, ISC2, ISACA, or SANS.
Ongoing commitment to learn and develop technical knowledge for existing and new technologies.
In-depth knowledge in a diverse range of cybersecurity concepts and controls that provides the ability to discuss, consult on, and drive solutions for customers
Customer Centricity
Communication
Collaboration
Leadership

Nice To Haves

Experience or knowledge in programming language would be a plus.

Responsibilities

Support and help coordinate daily SOC operations by assisting with work prioritization and ensuring alignment with established SLAs and quality standards.
Serve as the primary technical escalation point for complex alerts and incident investigations.
Provide mentorship, guidance, and quality review of analyst work to promote consistency and continuous improvement.
Facilitate knowledge sharing, including leading discussions, incident reviews, and “lessons learned” sessions.
Contribute to the professional growth of team members through coaching and technical guidance.
Identify opportunities to improve operational efficiency and contribute to the design and implementation of enhanced processes and solutions.
Support the completion of Post Incident Reports (PIRs) and contribute to clear, timely communication during critical incidents.
Participate in the analysis and response to security alerts and incidents as needed.
Develop and maintain SOC procedures, runbooks, and operational documentation.
Support the implementation and evolution of detection standards, processes, and procedures.
Promote a high standard of client experience through quality-focused technical delivery.
Stay current on emerging threats, technologies, and industry best practices.
Identify opportunities for automation and work with internal teams to integrate improvements into SOC workflows.
Deliver training sessions and technical enablement activities for SOC analysts.
Escalate personnel-related concerns or performance issues to SOC management as appropriate.
Perform other duties as required or assigned.