security officer

Position SummaryThe Lead, Security Operations is a hands?on security leadership role responsible for overseeing the day-to-day operation and continuous improvement of the organization?s security posture. Operating within a small internal team and in partnership with outsourced SOC and security service providers, this role provides internal leadership, coordination, and subject-matter expertise across security monitoring, incident response oversight, vendor management, security tooling, internal processes, and staff awareness.�This individual acts as the primary internal point of contact for operational security matters, ensuring that threats are monitored, policies are enforced, and the business receives responsive, knowledgeable support on security-related questions and initiatives.Key Responsibilities�Security Operations & MonitoringOversee day-to-day security operations across the organization, coordinating closely with outsourced SOC and incident response partners.Review SOC alerts, escalations, and incident reports to ensure timeliness, accuracy, and appropriate remediation.Maintain and tune SIEM, EDR, vulnerability management, and other security tools to ensure optimal coverage.Track and report on security KPIs, operational metrics, and incident trends.Incident Response OversightServe as the primary internal escalation point for security incidents.Coordinate and direct third-party incident responders and forensic teams when required.Lead internal response activities including communication, containment, eradication, and recovery efforts.Conduct post-incident reviews and ensure lessons learned are integrated into processes and tooling.�Vendor & Partner ManagementManage relationships with external SOC, MSSP, and security product vendors.Evaluate vendor performance, SLAs, and contract deliverables.Participate in vendor selection, onboarding, and periodic performance reviews.Ensure synergy and alignment between internal processes and external service delivery.�Security Tooling & Technology ManagementWork closely in collaboration with Internal IT teams to administer security tools including SIEM, EDR, PAM, vulnerability scanners, identity security tools, and others as applicable.Identify and recommend improvements to the security technology stack.Work in collaboration with IT departments to ensure tools are deployed, maintained, patched, and configured in accordance with best practices.�Internal Processes, Policy Enforcement & GovernanceDevelop, maintain, and improve security operational procedures (SOPs, playbooks, workflows).Support enforcement and adoption of corporate security policies and standards.Collaborate with Compliance to align operations with regulatory and audit requirements.Conduct internal security reviews, risk assessments, and gap analyses.Security Awareness & TrainingCoordinate security awareness programs with other people leaders within the organization.Track training participation, evaluate program effectiveness, and recommend improvements.Provide guidance and coaching to employees on secure practices.�Internal Support & Business PartneringAct as the primary point of contact for internal teams seeking guidance on security processes, tools, or best practices.Participate in project reviews to ensure appropriate security considerations are integrated early.Provide consultancy to IT, DevOps, Cloud, and business units on operational security matters.�People Leadership (if applicable)Provide leadership and mentorship to the Security Operations Analyst.Help define roles, responsibilities, and growth paths within a small operational security function.Foster a culture of accountability, continuous improvement, and operational excellence.Qualifications�Required5?8+ years of security operations experience (SOC, incident response, blue team, security engineering, etc.).Strong understanding of security monitoring, detection engineering concepts, and security tooling.Hand