SOC Team Lead

Deepwatch

SOC Team Lead at Deepwatch responsible for detecting and responding to cyber incidents. Guiding analysts and ensuring timely delivery of comprehensive investigation reports.

Posted 7/7/2026full-timeTampa • Florida • 🇺🇸 United StatesSenior💰 $118,000 - $125,000 per yearWebsite

Tech Stack

Tools & technologies

CloudCyber SecuritySplunk

About the role

Key responsibilities & impact

Reporting directly to the SOC Manager, the SOC Team Lead at Deepwatch will make a significant impact on global security.
Actively detect and respond to incidents in real-time to protect our valued customers.
Take a proactive role in guiding analysts in cybersecurity-related education, helping them achieve their goals.
Tackle the hardest investigations a customer will have, ensuring that they get timely and comprehensive reports.
Support our customers by understanding their bespoke environment, needs and challenges.
Develop your skills by working with the best responders in the industry, your team and your shift!

Requirements

What you’ll need

Demonstrate 5+ years prior SOC experience as a technical escalation point or senior analyst, with the ability to support the team with escalations on an as-needed basis.
Identify opportunities for improvement, continuously measuring accuracy and quality of analysis performed.
Have a track record of working outside your team and across business units to solve problems when the situation requires it.
Extensive expertise with SIEMs such as Splunk (required), Google SecOps, and/or Microsoft Sentinel including the ability to navigate the console with ease, perform queries that result in efficient investigations and accurate alert analysis.
Have in-depth understanding of modern EDR, email security, and cloud identity platforms.
A high-level understanding of Adversary Tactics, Techniques, & Procedures (TTP), full packet capture analysis, malware analysis, host forensics (Windows).
Advanced knowledge of Event Logging, Triage, and Analysis.
The ability to autonomously perform a complete and thorough triage and incident investigation with the proficiency to pivot to other log sources, cloud systems, or consoles as necessary and to act as the final point of technical escalation for customers and analysts.
Measure and tell a compelling story with data, not just throughput and performance.
Demonstrate experience working customer SLAs and contract requirements ensuring your team is delivering with quality and efficiency at all times.
Identify problems inside and outside of your team and demonstrate the Deepwatch “One Team” core value by being a strong voice in identifying and ensuring problems are resolved.
Train and mentor other analysts using qualitative measurement tools and techniques as well as act as a coach and support career pathing for your team in partnership with the People Team.
GCIH, GCIA, GDAT, GMON, GREM, OCSP, CISSP certifications preferred, not required.

Benefits

Comp & perks

Medical, dental, vision, and disability insurance
Flexible Time Off (FTO), 12 company holidays, sick leave and 8-Weeks Paid Parental Leave
Unique professional development benefits with Annual “development dollars” to support our people growth and development
Wellness contests and monthly educational programs
401(K) retirement program

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Incident ResponseEvent LoggingTriageMalware AnalysisHost ForensicsFull Packet Capture AnalysisData StorytellingQuery PerformanceCloud Systems NavigationEmail Security

Soft Skills

MentoringProblem SolvingCollaborationCommunicationCoaching

Certifications

GCIHGCIAGDATGMONGREMOCSPCISSP