Backed by a16z.
About the role
As the Cyber Offense, SOC, and Incident Response Lead , you will lead the day-to-day operations and continued evolution of our global Security Operations Center (SOC) and incident response capabilities. You will serve as a key leader within the cybersecurity organization, responsible for ensuring the organization can effectively detect, investigate, contain, and respond to cyber threats across endpoints, identities, cloud environments, networks, and critical enterprise systems. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- Bachelor’s degree in Computer Science, Computer Engineering, Information Security, Cybersecurity, or a related field, or equivalent practical experience
- 8+ years of progressive cybersecurity experience, including significant hands-on experience in security operations, incident response, threat detection, or SOC leadership
- 3+ years of experience leading SOC analysts, incident response teams, managed security operations, or cross-functional cyber defense workflows
- Strong working knowledge of SIEM, SOAR, EDR/XDR, cloud security monitoring, identity security, email security, network security, and incident response processes
- Demonstrated experience building or improving detection use cases, alert triage workflows, response playbooks, escalation procedures, and SOC metrics
- Experience coordinating investigations involving phishing, malware, endpoint compromise, suspicious authentication, privileged access misuse, data exposure, and cloud security events
More about this role
As the Cyber Offense, SOC, and Incident Response Lead , you will lead the day-to-day operations and continued evolution of our global Security Operations Center (SOC) and incident response capabilities. You will serve as a key leader within the cybersecurity organization, responsible for ensuring the organization can effectively detect, investigate, contain, and respond to cyber threats across endpoints, identities, cloud environments, networks, and critical enterprise systems.
This role combines security operations leadership, incident response, detection engineering, and continuous improvement. You will establish and mature SOC processes, response playbooks, escalation procedures, operational metrics, and global handoff models while working closely with security engineering, IT, cloud, identity, threat intelligence, and other cross-functional teams.
You will lead the response to significant security incidents, coordinate investigations and incident communications, and help drive the organization toward faster and more consistent detection and containment. You will also leverage automation, SOAR capabilities, threat intelligence, threat hunting, and MITRE ATT&CK-aligned detection...
Browse similar: Startup jobs