# SOC Lead (Remote or Onsite)

Hiring organization: [Crane Co.](https://career.thegoodapps.co/organizations/crane-co)

Canonical page: https://career.thegoodapps.co/jobs/68536994-e8b9-4448-99c8-957353b9c598

Listed on Crane Co.'s own careers site. Applications go to them directly.

- Seniority: Senior
- Location: Stamford, CT
- Remote: yes

## Summary

A leadership role in a global security operations center where you'll direct incident response activities, develop automated detection and remediation processes, and mentor a team of analysts. This suits experienced security professionals who combine hands-on technical depth in threat hunting and SIEM/SOAR platforms with the ability to guide others and mature enterprise incident response capabilities.

_Our summary, not Crane Co.'s wording._

## Skills named

JSON, PowerShell, Python, REST APIs, XML

## Required

- 5+ years in security operations and incident response
- 2+ years supervisory experience leading SOC or IR analysts
- Technical security certification in incident response, digital forensics, or malware analysis (GCIH, GCFA, GNFA, GCTI or equivalent)
- Senior-level SOC experience at medium to large enterprises
- Experience triaging and investigating security incidents for analyst teams
- Proficiency in automation tools and custom development using Python, PowerShell or similar languages
- Experience with SIEM and SOAR technologies
- Understanding of modern cyber threats and detection/response methods
- Ability to work outside normal business hours and travel domestically and internationally
- US Person status per EAR 772 and ITAR 120.15

## Nice to have

- Degree in a related field
- Experience writing integrations using JSON, XML, and REST APIs
- Familiarity with EDR, firewalls, proxies, web and email filters, application allow-listing, sandboxing, threat intelligence, vulnerability scanning, IDS/IPS, and DLP
- Knowledge of financial, privacy, and governmental regulatory requirements for multinational organizations

Apply on Crane Co.'s site: https://cranecompany.wd5.myworkdayjobs.com/en-US/Careers/job/Stamford-Connecticut/SOC-Lead--Remote-or-Onsite-_JR101726