ZipRecruiter

Log In

1

Security Operations Lead Jobs (NOW HIRING)

AIS, LLC

Security Operations Lead

Alexandria, VA · On-site

Project Overview The Security Operations Lead is responsible for managing, directing, and executing enterprise security operations, including penetration testing, continuous monitoring, and advanced ...

DEUNA

Security Operations Lead

Security Operations Lead We're looking for an experienced Security Operations Lead to strengthen DEUNA's security posture as we continue scaling our global payments platform. This role is responsible ...

Deloitte

Security Operations Lead

Tallahassee, FL

Work You'll Do As a PROJECT - Security Operations Lead on the Cyber Defense & Resilience team, you will: * Support the implementation of extended detection and response services to enable automated ...

Accenture

Security Operations Lead

Washington, DC · On-site

Security Operations Lead (SOC Lead) Role Summary The Security Operations Lead will oversee all SOC functions and lead a blended team of SOC Analysts and Security Engineers to ensure rapid detection ...

Replit

Security Operations Lead

San Mateo, CA · On-site

Security Operations Lead (SOC Lead) Replit is the agentic software creation platform that enables anyone to build applications using natural language. With millions of users worldwide, Replit is ...

Deloitte

Security Operations Lead

Tallahassee, FL · On-site

Work You'll Do As a PROJECT - Security Operations Lead on the Cyber Defense & Resilience team, you will: * Support the implementation of extended detection and response services to enable automated ...

FORUS

Security Operations Lead

Manhattan, NY · On-site

Security Operations Lead As a Security Operations Lead at Forus, you will own the programs that let customers trust us with their most sensitive data. We operate on protected health information to ...

Replit

Security Operations Lead

Foster City, CA · On-site

We are looking for a Security Operations Lead (SOC Lead) to build, mature, and operate our 24/7 detection and response capabilities across a modern cloud-native and AI-driven environment. This role ...

Replit

Security Operations Lead

Foster City, CA · On-site

$295K - $385K/yr

We are looking for a Security Operations Lead (SOC Lead) to build, mature, and operate our 24/7 detection and response capabilities across a modern cloud-native and AI-driven environment. This role ...

Forus Inc

Security Operations Lead

New York, NY · On-site

About the role As a Security Operations Lead at Forus, you will own the programs that enable customers to trust us with their most sensitive data. We handle protected health information to automate ...

Forus Inc

Security Operations Lead

Manhattan, NY · On-site

About the role As a Security Operations Lead at Forus, you will own the programs that enable customers to trust us with their most sensitive data. We handle protected health information to automate ...

next page

Showing results 1-20

All JobsSecurity Operations Lead Jobs

Security Operations Lead information

See salary details

$12

$27

$64

How much do security operations lead jobs pay per hour?

As of Aug 7, 2026, the average hourly pay for security operations lead in the United States is $27.95, according to ZipRecruiter salary data. Most workers in this role earn between $18.27 and $31.01 per hour, depending on experience, location, and employer.

How does a Security Operations Lead typically collaborate with other departments to ensure organizational security?

A Security Operations Lead works closely with various departments such as IT, compliance, and risk management to develop and enforce security protocols. This role often involves coordinating incident response efforts, sharing threat intelligence, and conducting security awareness training across teams. Regular cross-functional meetings and clear communication channels are essential to address vulnerabilities and align security strategies with organizational goals. This collaborative approach helps ensure that security measures are integrated throughout the company’s operations.

What is a Security Operations Lead?

A Security Operations Lead is a professional responsible for overseeing the daily operations of an organization's security team. They manage security analysts, coordinate incident response, and ensure the effective monitoring and protection of digital assets against cyber threats. This role involves implementing security policies, handling escalations, and collaborating with other departments to maintain overall security posture. Security Operations Leads also play a key role in training staff and staying updated on the latest security technologies and threats.

What is the difference between Security Operations Lead vs Security Analyst?

AspectSecurity Operations LeadSecurity Analyst
CertificationsCompTIA Security+, CISSP, CISMCompTIA Security+, CEH, GIAC
Work EnvironmentOversees security teams, manages incident response, develops security strategiesMonitors security alerts, analyzes threats, implements security measures
Employer & Industry UsageUsed in organizations with security teams, corporate security departmentsCommon in security operations centers (SOCs), IT departments

The Security Operations Lead typically manages security teams and develops strategies, requiring leadership skills and certifications like CISSP. In contrast, a Security Analyst focuses on monitoring and analyzing security threats, often holding certifications like Security+ or CEH. Both roles are essential in cybersecurity but differ in responsibilities and scope.

What are the key skills and qualifications needed to thrive as a Security Operations Lead?

To thrive as a Security Operations Lead, you need a strong background in cybersecurity principles, incident response, and risk management, often supported by a relevant degree and certifications like CISSP or CISM. Familiarity with security information and event management (SIEM) tools, intrusion detection systems (IDS), and vulnerability assessment platforms is typically required. Leadership, analytical thinking, and effective communication are crucial soft skills for guiding teams and coordinating responses. These skills ensure proactive threat detection, efficient mitigation of security incidents, and robust organizational protection.
What cities are hiring for Security Operations Lead jobs? Cities with the most Security Operations Lead job openings:
What states have the most Security Operations Lead jobs? States with the most job openings for Security Operations Lead jobs include:
Security Operations Lead jobs near you
Infographic showing various Security Operations Lead job openings in the United States as of August 2026, with employment types broken down into 85% Full Time, 12% Part Time, 1% Temporary, and 2% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $58,139 per year, or $28 per hour.

Security Operations Lead

Accenture Federal Services

Washington, DC

Full-time

Re-posted 25 days ago

Accenture Federal Services rating

8.7

Company rating: 8.7 out of 10

Based on 20 frontline employees who took The Breakroom Quiz

44th of 482 rated business services

Job description

Security Operations Lead (SOC Lead)

Role Summary

The Security Operations Lead will oversee all SOC functions and lead a blended team of SOC Analysts and Security Engineers to ensure rapid detection, investigation, and response to security threats. This role is responsible for driving threat hunting, leading major incidents, engineering detection capabilities, and maturing SOC operations to stay ahead of evolving adversary behaviors. The Lead acts as the central coordination point during security events and sets the strategic direction for the SOC to ensure continuous, mission-critical security coverage.

Key Responsibilities

SOC Leadership & Operations

  • Lead daytoday SOC operations, including queue management, alert triage oversight, escalation handling, oncall rotations, and daily situational reporting.
  • Mentor and develop SOC analysts across tiers; refine SOPs, workflows, and response playbooks.
  • Drive threat hunting activities focused on identifying patterns, outliers, and TTPaligned behaviors across host, network, email, and cloud logs.
  • Oversee SIEM dashboarding, alert tuning, log source health, and rule/correlation development to strengthen detection depth.
  • Coordinate with Security Engineering to ensure logging fidelity, sensor coverage, and integration of new technologies.

Incident Response

  • Lead the full lifecycle of incident response: identification, containment, eradication, recovery, forensics support, and post-incident reporting.
  • Perform or direct deep-dive investigations using SIEM, NDR, EDR, packet analysis tools, and forensic artifacts.
  • Provide expert investigative support for large-scale or complex incidents where technical detections may not be available.
  • Guide analysts during highseverity incidents and act as the primary interface with client leadership and internal stakeholders.
  • Oversee threat intelligence intake and ensure IOCs, adversary behaviors, and campaign indicators are integrated into SOC detections.

Detection Engineering & Threat Analytics

  • Develop and optimize SIEM correlation rules, dashboards, and monitoring logic.
  • Enhance playbooks and automation pipelines to improve consistency and reduce analyst workload.
  • Ensure ongoing alignment to evolving threat actor TTPs, including insider threat and APT-style behaviors.
  • Integrate new data sources into SOC detection pipelines and validate alert efficacy.

Required Qualifications:

  • 8 years of cybersecurity experience, with 3+ years leading SOC or IR teams.
  • Hands-on experience triaging alerts, logs, events, and incident artifacts across enterprise environments.
  • Strong experience with one or more of the following technologies: SIEM (Splunk. Elastic etic), NDR (ExtraHop), EDR/XDR (Trellix), and packet analysis tools.
  • Demonstrated ability to lead incident response for high-severity cybersecurity events.

Preferred Qualifications:

  • Advanced experience in threat hunting, analytics, and adversary behavior profiling.
  • Certifications such as CISSP, GCIH, GCIA, GCED, CEH, or similar.
  • Experience building SIEM/SOAR automations and custom detection content.
  • Familiarity with malware triage, static/dynamic analysis, and IOC development.
  • Experience leading SOCs supporting federal missions or hightempo operational environments.
  • Exposure to cloud security monitoring (Azure/AWS/GCP) and SaaS logging integrations.

What Accenture Federal Services employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply