SOC Analyst Team Supervisor

We are continuously growing and we are looking for a SOC Analyst Team Supervisor to join our UniQue Security & Compliance Services team, part of our Professional Services Department.

What will you be bringing to the team? 

This is a key operational leadership role with responsibility for the day-to-day performance of the SOC Analyst function, the supervision of Level 1 and Level 2 analysts, and the consistent handling of security alerts and incidents.

We are looking for an experienced SOC professional with a strong record in leading analyst teams, coordinating complex investigations, managing high-severity incidents, and maintaining service quality in fast-paced or shift-based SOC environments.

The ideal candidate will combine mature incident-management judgment with strong people leadership, workload coordination, quality assurance, alert-fatigue management, and continuous improvement of triage and investigation practices.

The role will work closely with SOC Engineering, Incident Response, Threat Intelligence, infrastructure teams, clients, and business stakeholders to ensure that operational requirements are translated into effective processes and measurable service improvements.

For the SOC Analyst Team Supervisor position we expect you to:

• Lead, supervise, and support the daily activities of Level 1 and Level 2 SOC Analysts.
• Manage alert and case queues, shift coverage, workload distribution, priorities, and handovers to ensure operational continuity.
• Oversee the full security incident lifecycle from detection and validation through classification, investigation, escalation, containment coordination, resolution, and closure.
• Act as the primary escalation point for complex, high-severity, or time-sensitive incidents.
• Coordinate major incidents and ensure timely and effective communication among analysts, technical teams, clients, management, and other stakeholders.
• Ensure incidents are classified, prioritized, documented, escalated, and handled in accordance with procedures, escalation matrices, SLAs, and contractual commitments.
• Review analyst investigations, evidence, escalation decisions, and incident reports to ensure quality, accuracy, and completeness.
• Provide real-time guidance and decision support to analysts during complex investigations and high-pressure situations.
• Manage alert fatigue by monitoring alert volumes, repetitive detections, low-value alerts, analyst workload, queue ageing, and investigation effort.
• Identify false positives, duplicate alerts, noisy use cases, detection gaps, and workflow inefficiencies, and coordinate tuning requirements with the SOC Engineering team.
• Ensure tuning and suppression activities improve efficiency without compromising detection coverage or increasing risk.
• Define, monitor, and report SOC operational KPIs, including SLA compliance, backlog, response and resolution times, escalation quality, and false-positive rates.
• Conduct case reviews, quality assurance checks, post-incident reviews, lessons learned, and corrective action follow-up.
• Maintain and improve triage criteria, analyst procedures playbooks, runbooks, escalation workflows, handover standards, and investigation templates.
• Coach, mentor, and develop SOC Analysts through feedback, knowledge sharing, training, and performance development activities.
• Foster accountability, collaboration, consistency, resilience, and sound decision-making across the team.
• Prepare incident summaries, operational reports, client updates, and management communications.
• Collaborate with SOC Engineering and other security teams to enhance detections, analyst tooling, automation, and overall SOC maturity.

What do you need to succeed in this position?

Your experience, skillset and qualifications are going to help you succeed in this position, moving forward.

• Bachelor's degree in a relevant field (Cyber Security, Information Technology, Computer Science, Engineering etc.) is required.
• A Master’s degree in Information Security or relative discipline will be considered a plus.
• At least 5 years of proven hands-on experience in Security Operations Center environments.
• At least 3 years of demonstrated experience in leading, supervising, or coordinating Level 1 and Level 2 SOC Analyst teams.
• Strong experience managing analyst teams in 24x7, shift-based, managed-service, or similarly demanding SOC environments.
• Advanced experience in security incident management, alert triage, investigations, escalation handling, and major incident coordination.
• Proven ability to make sound decisions during complex or high-severity incidents and guide analysts through high-pressure situations.
• Strong understanding of incident classification, severity assessment, evidence handling, containment, remediation, recovery, and closure processes.
• Demonstrated expertise in alert-fatigue management, false-positive reduction, alert prioritization, queue optimization, and detection tuning governance.
• Experience defining and monitoring SOC KPIs, SLAs, quality metrics, operational thresholds, and team performance indicators.
• Experience developing and maintaining SOC procedures, playbooks, runbooks, escalation workflows, and shift-handover processes.
• Working knowledge of SIEM, SOAR, EDR/XDR, NDR, threat intelligence, vulnerability management, identity security, and cloud security monitoring.
• Good understanding of MITRE ATT&CK and common threat scenarios, including phishing, malware, credential compromise, ransomware, lateral movement, and data exfiltration.
• Relevant industry certifications will be highly appreciated, such as CISSP, CISM, CompTIA CySA+, CompTIA Security+, GIAC certifications, EC-Council Certified SOC Analyst
• Effective people leadership skills with the ability to drive team performance and operational excellence, a clear decision-making during critical situations, and accountability under pressure.
• Strong analytical, prioritization, communication, stakeholder management, and problem-solving skills.
• Excellent written and verbal communication skills in English.

What are we offering to our UniQue IT People?

• People-first approach and open environment to express your ideas
• Work-life balance and a hybrid work model
• Continuous training and development
• Opportunities to join innovation initiatives
• Ticket restaurant – meal vouchers
• Corporate laptop and equipment
• Corporate mobile phone subscription
• Health and insurance plan for you and your family members
• Employee consulting and guidance support by Ergonomia
• Discounts on the services and products of our Group’s companies
• Gift vouchers for major life milestones
• Special work schedule on summer Fridays and birthdays

Our UniQue IT people are the most valuable part of Uni Systems; their knowledge and experience have made us the leading and reliable systems integrator of today and have contributed to our steady financial growth. We have created and are maintaining a stable working environment for our employees, with countless opportunities to innovate and thrive. Our work culture recognizes our UniQue IT people and supports the free sharing of ideas and the flow of information via open communication while appreciating and effectively utilizing the talents, skills, and perspectives of each employee.

At Uni Systems, we are providing equal employment opportunities and banning any form of discrimination on grounds of gender, religion, race, color, nationality, disability, social class, political beliefs, age, marital status, sexual orientation or any other characteristics. Take a look at our Diversity, Equality & Inclusion Policy for more information.