Attack Monitoring Shift Lead – Global Security Operations Centre

About the role

The Attack Monitoring Shift Lead will head the Global Security Operations Centre (GSOC) team responsible for detecting, triaging and responding to cyber security incidents. Working on a rotating shift schedule, the role ensures continuous protection of the organisation’s digital assets and drives improvements in the SOC’s defensive capabilities.

Key responsibilities

• Lead and manage a team that identifies and responds to cyber security events and incidents.
• Triage security events and execute a methodical response process.
• Operate SIEM platforms such as Splunk, QRadar or LogRhythm for investigations and dashboard development.
• Apply playbooks, knowledge bases and online resources during incident response.
• Research and collect threat intelligence to enhance detection capabilities.
• Develop or improve run‑books and use cases based on investigations and modern attack techniques.
• Stay current with vulnerabilities, attack methods and countermeasures.
• Serve as the escalation point for complex cyber security incidents.

Required profile

• Strong technical background in cyber security operations.
• Demonstrated leadership and people‑management abilities.
• Deep understanding of modern attack techniques and the attack lifecycle.
• Excellent analytical and communication skills.

Required skills

• Experience with SIEM tools such as Splunk, QRadar or LogRhythm.