Security Operations Lead (Dallas)

We are seeking a highly skilled and technically hands-on Onsite SOC / Incident Response (IR) Lead Analyst to join our clients cybersecurity team in Fort Worth, TX. This role is critical in leading onsite incident response efforts and overseeing Security Operations Center (SOC) activities in coordination with a global cyber fusion center. The ideal candidate will have deep expertise in Microsoft security technologies and a proven track record in incident response and SOC operations.

Responsibilities :

• Lead and supervise daily SOC operations, ensuring timely and effective threat detection and response.
• Act as the primary onsite responder for cybersecurity incidents and alerts.
• Investigate, analyze, and contain security incidents using Microsoft Sentinel, Defender (MDE), and Purview DLP.
• Collaborate with remote SOC teams (L2 / L3) to manage and escalate incidents.
• Review and tune alert rules and configurations to reduce false positives and improve detection accuracy.
• Conduct root cause analysis and post-incident reporting.
• Develop and maintain incident response plans and playbooks.
• Track and report on SOC KPIs, incident trends, and operational metrics.
• Provide security awareness training and guidance to internal stakeholders.
• Stay current with emerging threats, vulnerabilities, and regulatory requirements.
• Coordinate with IT, legal, and business teams during incident response and remediation efforts.
• Drive continuous improvement of SOC processes, tools, and maturity.

Qualifications :

Certifications :

Important Note :