Lead SOC Analyst

Role overview Lead day-to-day security operations for a shift, helping analysts investigate complex threats and protect customer environments. The role combines hands-on incident triage and escalation with coaching, quality improvement, and coordination across security response and customer-facing teams.

Responsibilities - Guide analysts through complex investigations, including effective SIEM analysis and established security practices. - Serve as the shift’s escalation point and determine next steps for critical investigations, suspected compromises, and network targeting. - Take ownership of high-complexity customer incidents and help ensure timely, thorough reporting. - Coordinate with threat response resources when an incident or compromise requires additional support. - Coach analysts, support security learning, and participate in peer review of escalated analysis. - Contribute to operational improvement projects, procedures, and customer experience in partnership with leadership and product teams.

Requirements - At least five years of security operations experience. - Strong cybersecurity knowledge and the ability to advise on complex escalations. - Ability to communicate investigation findings and guide analysts through response decisions. - Eligibility as a U.S. person under applicable export-control rules, such as U.S. citizenship, permanent residency, refugee status, or asylum status. - Ability to work from a home office when remote and pass a pre-employment background check.

Benefits and work setup The schedule is Monday through Friday, 6 a.m. to 2 p.m. Eastern. The role can be fully remote within the United States or hybrid in Tampa, with three office days and two remote days per week. Benefits include medical, dental, vision, and disability coverage; flexible time off, holidays, sick leave, and paid parental leave; a retirement plan; and annual professional development funding.