SecOps Lead

• Design and execute a SOC modernization roadmap, including workflow standardization and process improvements
• Establish consistent processes across intake, triage, investigation, escalation, and closure
• Improve case management quality, documentation standards, and audit readiness
• Define operational rhythms including queue health checks, reporting, and post-incident reviews

• Implement AI-assisted capabilities to improve alert triage, investigation, and case documentation
• Enable automation for enrichment, prioritization, and response workflows
• Define governance and guardrails (approval workflows, audit trails, data handling standards)
• Evaluate vendors and/or internal solutions and lead pilot programs through production deployment

• Lead integrations across SIEM, EDR, SOAR, cloud telemetry, and collaboration tools
• Partner with engineering teams to improve telemetry pipelines, normalization, and enrichment
• Define operational acceptance criteria for tooling changes (reliability, latency, security)

• Develop and track key SOC performance metrics (e.g., time-to-triage, case aging, escalation quality)
• Lead continuous improvement through quality reviews, post-incident analysis, and KPI tracking
• Identify inefficiencies and implement targeted improvements via automation and process optimization

• Train and mentor analysts on workflows, tools, and best practices
• Improve coordination across Security, Engineering, IT, and Platform teams
• Provide concise, actionable updates to leadership stakeholders

• 5+ years of experience in security operations, SOC engineering, or incident response
• Strong understanding of SOC workflows and incident lifecycle management
• Experience with SIEM, EDR, and security tooling integrations
• Proven ability to drive operational improvements (processes, playbooks, automation)
• Strong communication and stakeholder management skills

• Experience with AI-assisted SOC tooling or automation platforms
• Experience implementing SOAR or workflow automation solutions
• Familiarity with query languages (KQL, SPL, WQL)
• Scripting experience (Python or Bash)
• Exposure to cloud environments (AWS, Azure, GCP)

• Standardized and measurable SOC workflows across teams
• Reduced alert fatigue and improved investigation efficiency
• Successful adoption of AI-assisted tools with appropriate governance
• Improved integration and data quality across security tooling
• Clear metrics demonstrating continuous operational improvement

• Base Salary: $160,000-$180,000 annually
• No bonus structure associated with this role
• Benefits: medical, dental, and vision insurance available

• Collaborative, cross-functional environment working closely with security and engineering teams
• Fast-paced, continuous improvement–driven organization
• Hybrid or onsite expectations may vary based on location

LaSalle Network is an Equal Opportunity Employer m/f/d/v.

All assignments are at-will and their duration is subject to change.