SOC Supervisor

The SOC Supervisor plays a critical role in overseeing the Security Operations Center (SOC) team to ensure continuous monitoring and protection of the bank’s digital banking infrastructure. This position involves managing the detection, investigation, and escalation of cybersecurity threats impacting core banking systems, cloud environments, and payment platforms. The SOC Supervisor ensures timely response to security events by leading alert triage, incident handling, and maintaining robust operational procedures within a 24/7 monitoring environment.

Key Responsibilities

- Supervise SOC analysts responsible for monitoring security alerts and telemetry across various platforms.
- Ensure continuous 24/7 monitoring of SIEM alerts and other security monitoring tools to maintain comprehensive threat visibility.
- Manage alert triage, investigation workflows, and escalation processes to guarantee prompt and effective incident response.
- Analyze security alerts generated from SIEM platforms, EDR/XDR solutions, network security tools, and cloud security monitoring systems.
- Identify indicators of compromise (IOCs) and suspicious activities across the bank’s digital assets.
- Lead initial investigations and containment efforts for cybersecurity incidents, escalating high-severity cases to the Deputy CISO and incident response team.
- Maintain detailed incident documentation, investigation records, and root-cause analysis reports to support continuous improvement.
- Develop and update SOC playbooks for common attack scenarios, including phishing, malware infections, account compromises, insider threats, and distributed denial-of-service (DDoS) attacks.
- Utilize threat intelligence feeds to enhance detection capabilities and update SIEM correlation rules and alert thresholds to reduce false positives.
- Ensure monitoring coverage across critical infrastructure, including core banking systems, digital banking platforms, payment systems, cloud infrastructure, network devices, and endpoint security tools.
- Prepare comprehensive SOC operational reports covering security incident summaries, threat trend analysis, false positive rates, and incident response time metrics.
- Support ongoing improvements in SOC operations and threat detection processes to strengthen the bank’s cybersecurity posture.

Required Qualifications

- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- 5 to 8 years of experience in cybersecurity operations, with at least 2 to 3 years in a SOC environment.
- Hands-on experience with SIEM, EDR/XDR, threat monitoring, and incident response tools.
- Strong analytical and leadership skills to manage SOC teams and complex security incidents effectively.

Preferred Qualifications

- Experience working in banking, fintech, or financial services environments is highly desirable due to the specialized nature of the infrastructure and regulatory requirements.

This role offers the opportunity to lead a critical security function within a dynamic financial institution, contributing directly to the protection of sensitive banking systems and customer data. The SOC Supervisor will work closely with cybersecurity leadership and incident response teams to maintain a resilient security posture against evolving threats.