SOC Supervisor

About the role

The SOC Supervisor leads the Security Operations Center, overseeing daily monitoring, incident response and detection capabilities. Reporting to senior management, the role ensures the organization’s information assets are protected and compliance requirements are met.

Key responsibilities

• Oversee daily SOC operations, ensuring continuous monitoring and timely response to security alerts.
• Supervise SOC Analysts (L1), enforce SOPs and SLAs, and maintain SIEM platform performance.
• Act as primary escalation point for incidents, leading identification, containment, eradication and recovery activities.
• Perform root cause analysis, document incidents and coordinate with NOC, IT and network teams.
• Develop, implement and optimise SIEM use cases, correlation rules and threat‑intelligence feeds.
• Continuously improve detection capabilities and reduce false positives.
• Ensure SOC compliance with organisational policies and regulatory requirements, supporting audits and maintaining log retention policies.
• Prepare and present incident, performance and risk assessment reports, and maintain SOPs, playbooks and escalation matrices.
• Coordinate with external auditors, vendors and regulatory bodies, and lead security drills and tabletop exercises.

Required profile

• Bachelor’s degree in Cyber Security, Computer Science or a related field.
• 3–4 years of experience in IT security, SOC operations or incident response.
• Proven ability to supervise analysts and manage security incidents.
• Strong understanding of regulatory and organisational security requirements.

Required skills

• SIEM platforms (e.g., Wazuh or equivalent)
• Network security, firewalls, IDS/IPS and VPNs
• Incident response and threat analysis
• Threat intelligence integration
• Vulnerability management
• Log analysis and retention