SOC Supervisor

The SOC Supervisor plays a critical role in leading the Security Operations Center team to ensure continuous and effective monitoring of security events across the bank’s digital banking infrastructure. This position is responsible for overseeing threat detection, alert triage, incident investigation, and escalation processes to enable timely and efficient responses to cybersecurity threats impacting banking systems, cloud environments, and payment platforms. The SOC Supervisor ensures that security operations run smoothly around the clock, maintaining the integrity and security of critical financial systems.

Key Responsibilities

- Supervise SOC analysts who monitor security alerts and telemetry data to identify potential threats.
- Ensure 24/7 continuous monitoring of SIEM alerts and other security monitoring platforms.
- Manage alert triage processes, investigation workflows, and escalation procedures to maintain operational efficiency.
- Analyze security alerts generated from SIEM platforms, EDR/XDR solutions, network security tools, and cloud security monitoring systems.
- Identify indicators of compromise (IOCs) and suspicious activities across various systems.
- Lead the initial investigation and containment efforts for cybersecurity incidents.
- Escalate high-severity incidents promptly to the Deputy CISO and the incident response team.
- Maintain thorough incident documentation, investigation records, and root-cause analysis reports.
- Develop and maintain SOC playbooks for common attack scenarios, including phishing attacks, malware infections, account compromises, insider threats, and distributed denial-of-service (DDoS) attacks.
- Utilize threat intelligence feeds to enhance detection capabilities and stay ahead of emerging threats.
- Update SIEM correlation rules and alert thresholds to reduce false positives and improve detection accuracy.
- Ensure comprehensive monitoring coverage across critical infrastructure, including core banking systems, digital banking platforms, payment systems, cloud infrastructure, network devices, and endpoint security tools.
- Prepare detailed SOC operational reports covering security incident summaries, threat trend analyses, false positive rates, and incident response time metrics.
- Support continuous improvement initiatives aimed at enhancing SOC operations and threat detection processes.

Required Qualifications

- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
- 5 to 8 years of experience in cybersecurity operations.
- At least 2 to 3 years of hands-on experience working within a SOC environment.
- Practical experience with SIEM, EDR/XDR, threat monitoring, and incident response tools.
- Strong analytical skills to interpret security data and manage incident investigations effectively.

Preferred Qualifications

- Experience working in banking, fintech, or financial services sectors is highly desirable due to the specialized nature of the environment.
- Familiarity with regulatory requirements and compliance standards relevant to financial institutions.

This role offers the opportunity to lead a vital security function within a dynamic financial organization, contributing directly to the protection of critical digital assets and customer trust. The SOC Supervisor will be instrumental in shaping security operations and driving continuous improvements in threat detection and incident response capabilities.