Security Operations Center (SOC) Lead

Company Description

At Sandisk, our vision is to power global innovation and push the boundaries of technology to make what you thought was once impossible, possible.

At our core, Sandisk is a company of problem solvers. People achieve extraordinary things given the right technology. For decades, we’ve been doing just that. Our technology helped people put a man on the moon.

We are a key partner to some of the largest and highest growth organizations in the world. From energizing the most competitive gaming platforms, to enabling systems to make cities safer and cars smarter and more connected, to powering the data centers behind many of the world’s biggest companies and public cloud, Sandisk is fueling a brighter, smarter future.

Binge-watch any shows, use social media or shop online lately? You’ll find Sandisk supporting the storage infrastructure behind many of these platforms. And, that flash memory card that captures and preserves your most precious moments? That’s us, too.

Today’s exceptional challenges require your unique skills. It’s You & Sandisk Together, we’re the next BIG thing in data.

Job Description

We are seeking a highly skilled and experienced Security Operations Center (SOC) Manager to lead our cybersecurity defense team. As the SOC Manager, you will be responsible for overseeing the day-to-day operations of the SOC, ensuring the effective detection, investigation, and response to security incidents. You will work closely with other cybersecurity teams, IT departments, and senior leadership to protect our organization’s assets and data from cyber threats.

Key Responsibilities:

• Leadership & Management: Lead and manage a team of SOC analysts, threat hunters, and incident responders. Develop and maintain SOC processes, playbooks, and standard operating procedures to ensure consistent and effective response to security incidents. Foster a collaborative and high-performance culture within the SOC team, providing mentorship, guidance, and professional development opportunities.
• Incident Management: Oversee the monitoring and analysis of security events to detect and respond to potential threats. Ensure timely and effective response to security incidents, including root cause analysis, containment, eradication, and recovery. Coordinate with other departments during major incidents, ensuring clear communication and alignment.
• Operational Excellence: Continuously improve SOC operations by evaluating and implementing new tools, technologies, and methodologies. Ensure SOC coverage 24/7 through effective staffing and on-call rotations. Develop key performance indicators (KPIs) and metrics to measure the effectiveness of SOC operations and drive continuous improvement.
• Threat Intelligence & Analysis: Integrate threat intelligence into SOC operations, ensuring that the team is aware of and prepared for emerging threats. Oversee the creation and refinement of detection rules, ensuring they are aligned with the latest threat landscape. Lead efforts to identify gaps in monitoring and develop strategies to enhance detection capabilities.
• Collaboration & Communication: Work closely with the IT and cybersecurity teams to ensure alignment on security strategies and initiatives. Communicate SOC performance, threat landscape insights, and incident response outcomes to senior leadership and other stakeholders. Collaborate with external partners and industry peers to stay informed of the latest security trends and best practices.
• Compliance & Risk Management: Ensure SOC operations comply with relevant regulations, standards, and best practices. Participate in audits, assessments, and reviews to ensure the organization’s security posture is robust and compliant. Work with the risk management team to assess and mitigate security risks.

Qualifications

Technical Skills:

• Proficiency with SIEM tools, EDR solutions (Defender, CrowdStrike), and other security monitoring technologies.
• Knowledge of network and endpoint security, threat intelligence, and incident response methodologies.
• Experience with scripting or programming languages (e.g., Bash, Python, PowerShell) is a plus.
• Certifications such as CISSP, CISM, GIAC Security Operations Certified (GSOC), Certified SOC Analyst (CSA), or similar.
• Experience with regulatory and compliance requirements related to cybersecurity.

Soft Skills:

• Excellent leadership and team management skills.
• Pragmatic problem solver and organizational
• Strong communication and interpersonal abilities, with experience presenting to senior leadership.
• Ability to make critical decisions under pressure and in complex