SOC Team Lead – Incident Response
Location
Arlington Heights, IL
Job Type
Full-time
Category
other-general
Posted
June 24, 2026
Job Description
The SOC Team Lead – Incident Response is a senior, customer facing leadership role responsible for overseeing day to day security monitoring, incident handling, and escalation processes across the Security Operations Center. This role provides technical leadership, manages escalated incidents, guides SOC Analysts I–III, drives process improvement, and ensures the SOC’s incident response capabilities operate with accuracy, consistency, and speed. The Team Lead serves as the primary escalation point for complex security events and collaborates with the client’s engineering, architecture, and operations teams to ensure effective detection, containment, and remediation of threats. The position requires strong incident response expertise, deep knowledge of threat actor TTPs, and the ability to make command decisions under pressure—consistent with SME level expectations.
Incident Response Leadership (50%)
• Lead escalated security incidents from identification...
The SOC Team Lead – Incident Response is a senior, customer facing leadership role responsible for overseeing day to day security monitoring, incident handling, and escalation processes across the Security Operations Center. This role provides technical leadership, manages escalated incidents, guides SOC Analysts I–III, drives process improvement, and ensures the SOC’s incident response capabilities operate with accuracy, consistency, and speed. The Team Lead serves as the primary escalation point for complex security events and collaborates with the client’s engineering, architecture, and operations teams to ensure effective detection, containment, and remediation of threats. The position requires strong incident response expertise, deep knowledge of threat actor TTPs, and the ability to make command decisions under pressure—consistent with SME level expectations.
Incident Response Leadership (50%)
• Lead escalated security incidents from identification...