SOC Duty Analysts Team Lead

SOC Duty Analysts Team Lead at Cloud.ru. Location: Moscow, office. Salary discussed at interview. Operational management of shifts, incident management, team mentoring, reporting, and monitoring tuning.

Operational shift management: organizing shift handovers/acceptance; controlling staffing and duty schedule; distributing workload among duty analysts; monitoring and compliance with KPI and SLA. Incident management in team's area: managing incident handling in IRP and JiraSM; ensuring escalation to CERT team. Team work: mentoring and training L1 team; controlling metrics and quality of duty analysts; distributing project tasks and controlling execution; general team management, conducting 1:1s. Communications and reporting: forming shift reports; promptly notifying stakeholders about incidents; interacting with other company units in own area. Technical and process tasks: maintaining knowledge base and department documentation; participating in creating SOC content in own area; tuning monitoring system, configuring exceptions and filters.

Deep understanding of cyber threats, attack methods, and principles of network/system operation. Ability to think clearly and make decisions during critical incidents. Knowledge of Kill Chain model, MITRE ATT&CK framework, and SANS Incident Response (SANS IR) incident handling cycle.

Location: Moscow, office. Salary: discussed at interview.