SOC Supervisor

The SOC Supervisor will lead a team of Security Operations Center analysts to ensure continuous and effective monitoring of security events across the Bank’s digital banking infrastructure. This role is critical in overseeing threat detection, alert triage, incident investigation, and escalation processes to provide timely responses to cybersecurity threats impacting banking systems, cloud environments, and payment platforms. The SOC Supervisor will play a key role in maintaining the security posture of the organization by managing daily SOC operations and driving improvements in threat detection and incident handling.

Key Responsibilities

- Supervise SOC analysts responsible for monitoring security alerts and telemetry data.
- Ensure 24/7 continuous monitoring of SIEM alerts and other security monitoring platforms.
- Manage alert triage, investigation workflows, and escalation procedures to ensure efficient incident handling.
- Analyze security alerts generated from various sources including SIEM platforms, EDR/XDR solutions, network security tools, and cloud security monitoring systems.
- Identify indicators of compromise (IOCs) and suspicious activities across systems.
- Lead initial investigations and containment efforts for cybersecurity incidents.
- Escalate high-severity incidents promptly to the Deputy CISO and the incident response team.
- Maintain detailed incident documentation, investigation records, and root-cause analysis reports.
- Develop and maintain SOC playbooks for common attack scenarios such as phishing attacks, malware infections, account compromises, insider threats, and distributed denial-of-service (DDoS) attacks.
- Utilize threat intelligence feeds to enhance detection capabilities.
- Update SIEM correlation rules and adjust alert thresholds to reduce false positives and improve detection accuracy.
- Ensure comprehensive monitoring coverage across critical infrastructure including core banking systems, digital banking platforms, payment systems, cloud infrastructure, network devices, and endpoint security tools.
- Prepare regular SOC operational reports covering security incident summaries, threat trend analyses, false positive rates, and incident response time metrics.
- Support continuous improvement initiatives within SOC operations and threat detection processes.

Required Qualifications

- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- 5 to 8 years of experience in cybersecurity operations.
- At least 2 to 3 years of hands-on experience working within a SOC environment.
- Proficiency with SIEM, EDR/XDR, threat monitoring, and incident response tools.
- Strong analytical and investigative skills to identify and respond to security threats effectively.

Preferred Qualifications

- Experience working in banking, fintech, or financial services environments is highly desirable.
- Familiarity with regulatory requirements and security standards relevant to the financial sector.

This position offers the opportunity to lead a critical security function within a dynamic banking environment, contributing directly to the protection of sensitive financial systems and customer data. The SOC Supervisor will work closely with senior security leadership to enhance the Bank’s cybersecurity resilience and incident response capabilities.