Note: The job is a remote job and is open to candidates in USA. Insight Global is seeking a Lead Cybersecurity Operations professional to advance Cybersecurity Operations Center capabilities. The role oversees threat detection and incident response, serves as a technical escalation point, and improves security operations through SIEM-driven detection, operational initiatives, playbooks, automation, and metrics.

Responsibilities

• Lead Cybersecurity Operations Execution & Quality
• Oversee day-to-day security monitoring, detection, and response activities, ensuring high-quality investigations and timely remediation of security events and incidents
• Serve as Primary Technical Escalation Point
• Act as the go-to escalation resource for analysts, providing hands-on guidance for complex investigations and ensuring consistency and depth in investigative outcomes
• Own Incident Response Lifecycle & Stakeholder Coordination
• Lead and coordinate complex security incidents end-to-end, while acting as a liaison between leadership and the SOC—translating strategic direction into actionable tasks and delivering clear, meaningful updates
• Drive Detection & Response Maturity (SIEM & Tooling)
• Lead SIEM-driven operations and continuously improve detection capabilities through use-case development, tuning, telemetry optimization, and enhanced coverage across security domains
• Coordinate SME Programs & Operational Initiatives
• Break down strategic cybersecurity objectives into actionable workstreams, track progress, remove blockers, and ensure successful execution of team initiatives
• Develop & Optimize Playbooks, Processes, and Automation
• Create and refine incident response playbooks, SOPs, and automation opportunities to improve consistency, efficiency, and scalability of operations
• Leverage Metrics & Threat Insights to Drive Improvement
• Track key operational metrics (MTTD, MTTR, alert fidelity) and conduct advanced threat analysis to inform decisions, strengthen defenses, and continuously improve security posture

Skills

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent practical experience)
• Security+, GCIH, GCIA, GCED, or equivalent certifications
• 5–8+ years of experience in cybersecurity operations or SOC environments
• Proven experience leading or coordinating incident response activities
• Hands-on experience with SIEM platforms and building detection-driven operations
• Strong familiarity with security technologies such as EDR, NDR, email security, WAF, and identity/security monitoring tools
• This position requires a hands-on leader with deep technical expertise, strong operational awareness, and a passion for elevating both team performance and cybersecurity capabilities in a fast-paced, evolving threat landscape

Company Overview

Company H1B Sponsorship