Leads SOC engineering support for SIEM, XDR, NDR, EDR, and packet capture platforms. Manages engineers, customer troubleshooting, system administration, technology implementations, platform optimization, documentation, workload planning, on-call scheduling, and technical mentoring. Requires extensive experience across cloud, on-premises, and hybrid environments, plus hands-on cybersecurity platform administration and engineering leadership.

Investigate and triage security alerts, support customers through incident response, analyze logs and packet captures, perform threat hunting, communicate findings, and mentor junior analysts. The role requires expertise in TCP/IP, security architecture, threat actor tactics, SIEM platforms, incident response methodologies, ticketing systems, and forensic analysis.

Provides engineering, administration, monitoring, upgrades, troubleshooting, and customer support for SIEM, EDR, NDR, email security, data pipeline, and related platforms. Configures and customizes customer security systems, integrates technologies, automates tasks, manages Linux, Windows, and Azure environments, and applies advanced networking and troubleshooting skills. The role includes direct customer communication, prioritizing technical issues, resolving system faults, and participating in an on-call rotation.