Category: Cybersecurity

Employment Type: Direct Hire

Reference: BH-371439

Yoh has an exciting opportunity for a Lead SOC Analyst in Tampa, FL. The mission of the Incident Response team is to protect the organization from external cyber threats and to respond to and manage cyber incidents. You manage the firm's response to cyber security incidents, conduct post-incident activities such as Root Cause Analysis, and prepare the team to respond to incidents through training, exercises, and drills. You are a subject matter expert in cybersecurity, helping to prepare the firm to withstand the impacts of cyber-attacks and providing critical tactical leadership during significant incidents. During a cyber incident, you will be responsible for assembling and leading a cross-functional team of technical experts from throughout the organization to respond to, contain, and recover from cyber incidents.

Title: Lead SOC Analyst
Salary: $150k - $170k, DOE
Location: Tampa, FL
Type: Full-time, direct hire; hybrid schedule

Responsibilities:

• Lead the Cyber Security Incident Response Team, assuming roles such as Incident Commander or Operations Section Chief during critical incidents.
• Provide technical guidance throughout the incident lifecycle, including post-incident activities such as Root Cause Analysis and After-Action Reviews.
• Produce comprehensive reports containing detailed analysis, timelines, recommendations, and lessons learned.
• Plan and facilitate exercises and simulations to enhance the team's readiness and improve response capabilities.
• Conduct training sessions on incident response protocols and the incident command system for the Cyber Blue Team and response partners.
• Participate in on-call rotations and occasional after-hours work.

• Minimum of five (5) years of experience in cybersecurity, focusing on security operations, investigations, or incident response.
• Demonstrated leadership experience in high-stress environments.
• Proficiency in utilizing the Incident Command System.
• Strong tactical leadership skills for guiding teams through complex technical tasks.
• Excellent written and verbal communication skills, with the ability to convey technical concepts to both technical and non-technical audiences.
• Bonus points for certifications such as ECIH or GCIH, formal training in NIMS/ICS, and previous experience in exercise development using methodologies such as HSEEP.