NOC + SOC Lead

NOC + SOC Lead

Experience: 8-12 Years
Shift: 24x7 Operations Leadership
Team Size: 14 Resources (L1/L2 Analysts)

Role Summary

The NOC + SOC Lead will be responsible for leading 24x7 Network and Security Operations, ensuring service availability, security monitoring, incident response, and operational excellence. The role will manage a team of 14 analysts, provide technical leadership, handle major incidents, drive SLA compliance, and act as the primary customer escalation point.

Key Responsibilities

Operations & Service Delivery

• Lead and manage 24x7 NOC and SOC operations.
  
• Ensure continuous monitoring, alert triage, and incident management.
  
• Manage shift coverage, resource planning, and operational governance.
  
• Drive SLA, KPI, and service quality compliance.
  
• Conduct daily, weekly, and monthly operational reviews.
  

Incident & Security Management

• Lead Major Incident (P1/P2) management and escalation activities.
  
• Oversee security investigations, threat analysis, and incident response.
  
• Ensure rapid escalation of high and critical security incidents.
  
• Drive Root Cause Analysis (RCA) and Problem Management.
  
• Govern runbooks, operational procedures, and escalation matrices.
  

Technical Leadership

• Provide hands-on guidance across:
  
• Datadog (Infrastructure & Application Monitoring)
  
• CrowdStrike Falcon (Endpoint Security & Threat Detection)
  
• Databricks & SQL (Security and Operational Analytics)
  
• Microsoft Sentinel / Splunk
  
• Azure & AWS Cloud Operations
  
• Microsoft Defender XDR
  
• Network Technologies (TCP/IP, DNS, VPN, Firewalls)
  

Team & Stakeholder Management

• Lead, mentor, and develop NOC/SOC engineers.
  
• Drive technical training, certifications, and knowledge management.
  
• Manage customer communications and executive escalations.
  
• Ensure high-quality shift handovers and operational reporting.
  

Required Skills

• 8+ years in NOC, SOC, or IT Operations.
  
• 3+ years managing 24x7 support teams.
  
• Strong expertise in Datadog, CrowdStrike, Databricks, SQL, SIEM platforms, and Cloud Operations.
  
• Experience in Incident Management, Security Operations, and Service Management.
  
• Excellent stakeholder management and communication skills.
  

Preferred Certifications

• ITIL 4 Foundation / Managing Professional
  
• Microsoft SC-200
  
• AZ-500 or AWS Security Specialty
  
• CISSP / CySA+ / CEH
  
• CrowdStrike Certifications
  
• Datadog Certification
  

Success Measures

• 24x7 operational and security coverage.
  
• 98% SLA compliance.
  
• Effective incident and escalation management.
  
• Strong team performance and customer satisfaction.
  
• Continuous improvement in monitoring, security posture, and operational efficiency.