SOC Operations Specialist

About spiderSilk

Founded in 2019, spiderSilk set out with a bold vision to create regional, sovereign cybersecurity intellectual property that competes globally. Our mission is to revolutionize how organizations defend their dynamic digital infrastructure by delivering continuous, intelligent, and autonomous security solutions that are reliable and proactive. We are a team of globally distributed, inquisitive, and dedicated experts driven by a shared purpose to make the internet a safer place. Driven by vision, enthusiasm, and strong ownership, we foster a collaborative culture.

Role Overview

We seek a highly skilled Senior Security Analyst to lead our internal security operations. With a decade of professional experience, the ideal candidate will be responsible for overseeing day-to-day security monitoring, threat detection, incident management, and the refinement of security tools, ensuring robust defense against evolving cyber threats. This position requires expertise in designing, executing, and continually enhancing security operational procedures.

Key Responsibilities

• Lead the internal security operations function, providing ongoing monitoring, threat detection, and rapid incident response.
• Manage and optimize security platforms, specifically CrowdStrike Falcon and Wazuh.
• Handle incident response lifecycle including triage, containment, eradication, and system recovery.
• Analyze security alerts, logs, and telemetry data deeply to detect anomalies and potential security breaches.
• Create and update playbooks, runbooks, and automated workflows to improve SOC efficiency.
• Collaborate cross-functionally with IT, engineering, and business teams to enhance security controls on infrastructure, endpoints, and cloud services.
• Conduct threat hunting to proactively uncover vulnerabilities and risks.
• Mentor junior analysts, promoting an environment of continuous learning and knowledge exchange within the security team.
• Generate clear and informative reports on security postures, incidents, and improvements for both technical teams and executives.

Qualifications

• Minimum of 10 years’ experience in security operations, SOC roles, or equivalent cybersecurity functions.
• Expert hands-on experience with CrowdStrike Falcon and Wazuh deployment and operations.
• Strong expertise in incident response, threat hunting, and security log analysis.
• Familiarity with SIEM, EDR, and related security monitoring tools.
• Comprehensive understanding of network security, endpoint defense, and cloud platforms (preferably AWS, Azure, GCP).
• Experience automating security processes using scripting languages like Python or Bash.
• Professional certifications such as OSCP, GCIA, GCIH, CISSP or equivalents are highly valued.
• Excellent analytical thinking, communication, and leadership capabilities.