SOC Supervisor

About the role

The SOC Supervisor oversees the Security Operations Center analysts and ensures continuous monitoring of security events across the bank's digital banking infrastructure. The role covers threat detection, alert triage, incident investigation and escalation so that cybersecurity threats to banking systems, cloud infrastructure and payment platforms are responded to promptly.

Key responsibilities

• Supervise SOC analysts monitoring security alerts and telemetry
• Ensure 24/7 monitoring of SIEM alerts and security monitoring platforms
• Manage alert triage, investigation workflows and escalation procedures
• Analyze alerts from SIEM, EDR/XDR, network security and cloud security tools, and identify indicators of compromise
• Lead initial investigation and containment of incidents, escalate high-severity ones to the Deputy CISO and incident response team, and maintain incident documentation and root-cause analysis reports
• Develop and maintain SOC playbooks for phishing, malware, account compromise, insider threats and DDoS attacks
• Use threat intelligence feeds, update SIEM correlation rules and alert thresholds, and cover core banking, digital banking, payment systems, cloud infrastructure, network devices and endpoint security
• Prepare operational reports on incidents, threat trends, false positive rates and incident response times

Required profile

• Bachelor's degree in Computer Science, Cybersecurity or Information Technology
• 5-8 years of experience in cybersecurity operations
• 2-3 years in a SOC environment
• Experience in banking, fintech or financial services preferred

Required skills

• Hands-on experience with SIEM, EDR/XDR, threat monitoring and incident response tools
• Incident investigation and containment