Company Description UnderDefense is an Agentic AI SOC and Compliance Automation platform trusted by more than 200 enterprises across the US and EU. The platform operates on top of existing security stacks, eliminating the need for tool replacement or added headcount while enabling teams to focus on strategic security decisions. Its Agentic AI SOC automates enrichment, correlation, and triage, delivering machine-speed investigations and rapid alert handling with human review at key decision points. UnderDefense also offers MAXI Compliance AI, which continuously collects evidence for frameworks such as ISO 27001, SOC 2, PCI DSS, GDPR, and HIPAA, accelerating time-to-compliance and providing a real-time Trust Center view of security posture. The company focuses on combining advanced automation with human expertise to help organizations strengthen both security operations and compliance processes.
Role Description The SOC Team Lead is a full-time remote role responsible for overseeing day-to-day security operations and leading a team of SOC analysts. This role includes monitoring security events across client environments, coordinating incident triage and response, and ensuring effective use of UnderDefense's Agentic AI SOC capabilities for investigation and automation. The SOC Team Lead will design and refine playbooks, improve alert handling workflows, and collaborate with engineering and product teams to optimize integrations with existing security stacks. Daily tasks involve mentoring and coaching team members, reviewing complex cases and escalations, ensuring consistent documentation and reporting, and contributing to continuous improvement of detection and response strategies. The person in this role will also participate in client communications, support compliance-related initiatives, and help maintain high service quality and operational resilience.
Qualifications
Strong SOC leadership and operations experience, including managing SOC analysts, coordinating incident response, and overseeing shift coverage.
Hands-on expertise with security monitoring tools (e.g., SIEM, EDR, NDR, SOAR) and familiarity with integrating automation and AI into security workflows.
Solid understanding of security incident handling, threat detection, triage, and escalation processes across diverse environments (on-premises, cloud, hybrid).
Knowledge of common security frameworks and standards (e.g., ISO 27001, SOC 2, PCI DSS, GDPR, HIPAA) and experience supporting audit or compliance efforts.
Strong analytical and problem-solving skills, including the ability to interpret complex security data, make risk-based decisions, and prioritize effectively.
Clear and concise written and verbal communication skills, with experience preparing incident reports, runbooks, and stakeholder updates.
Experience in a remote, distributed team environment, with the ability to collaborate across time zones and work independently with minimal supervision.
Bachelor's degree in Computer Science, Information Security, or a related field, or
#J-18808-Ljbffr
