Lead and manage 24x7 SOC operations, ensuring consistent, high-quality alert monitoring, triage, and incident response across all markets.Own and drive SOC service performance against key KPIs including MTTT, MTTR, triage quality, and SLA adherence, delivering measurable improvements in detection quality, response speed, and efficiency.Oversee the full alert lifecycle, ensuring accurate investigation, containment, escalation, and high-quality incident reporting.Continuously enhance detection capabilities by improving SIEM use cases, alert logic, and playbooks, reducing false positives and increasing coverage across priority threat scenarios.Drive the adoption of automation, SOAR, and AI-assisted capabilities to improve speed, consistency, and scalability, with appropriate governance and human oversight.Lead SOC transformation initiatives focused on reducing alert fatigue, streamlining workflows, and improving analyst productivity.Build, coach, and develop a high-performing SOC team through structured capability development, performance management, and knowledge sharing.Act as the final escalation point for complex or high-risk incidents, applying expert judgement to validate and close cases.Deliver clear, data-driven SOC performance and incident reporting to senior leadership.Foster a culture of continuous improvement through post-incident reviews, detection retrospectives, and operational learning.
