Job Title
L2 SOC Technical Account Manager
Role Summary
We are seeking an experienced SOC Technical Account Manager to support the end customer.
The ideal candidate will possess strong experience in Security Operations Center (SOC) management, SIEM/SOAR technologies, threat monitoring, incident response, and MSSP service delivery. The role requires a customer-facing cyber security professional capable of managing security operations, stakeholder engagement, governance reporting, and security incident coordination in a large enterprise environment.
Key Responsibilities
- Manage day-to-day SOC operations and security monitoring activities.
- Monitor, investigate, and respond to security incidents and alerts.
- Manage SIEM/SOAR platforms including Microsoft Sentinel, Splunk, LogRhythm, or equivalent.
- Develop and maintain SIEM use cases, correlation rules, and SOAR playbooks.
- Perform threat hunting and threat intelligence analysis using MITRE ATT&CK methodologies.
- Coordinate incident response and escalation activities.
- Deliver weekly/monthly governance and compliance reports to customer stakeholders.
- Ensure MSSP SLA compliance and service delivery excellence.
- Collaborate with customer IT, infrastructure, and security teams.
- Participate in audits, compliance reviews, and cyber security drills.
- Act as technical escalation point for SOC operations and security incidents.
Mandatory Skills
- 8–12+ years of experience in SOC / Cyber Security Operations.
- Strong experience in MSSP environments.
- Hands-on expertise with SIEM platforms:
- Microsoft Sentinel,
- Splunk,
- LogRhythm,
- DNIF.
- Experience with SOAR automation and incident response playbooks.
- Knowledge of Threat Hunting and Threat Intelligence.
- Experience with EDR and security tools:
- CrowdStrike,
- Carbon Black,
- Trend Micro,
- Palo Alto.
- Strong understanding of MITRE ATT&CK framework.
- Experience in governance reporting and customer stakeholder management.
- Excellent communication and presentation skills.
Nice To Have
- CEH / SC-200 / Security certifications
- Cloud security exposure (AWS/Azure)
- Vulnerability Management experience (Tenable/Nessus)
- Audit & compliance exposure (ISO27001, PCI DSS)