ZipRecruiter

Log In

1

Security Operations Lead Jobs (NOW HIRING)

Deloitte

Security Operations Lead

Tallahassee, FL

Perform security operations activities to help monitor, analyze, and respond to cybersecurity events and incidents. * Must be able to obtain and maintain the required clearance for this role * Work ...

Deloitte

Security Operations Lead

Tallahassee, FL · On-site

Perform security operations activities to help monitor, analyze, and respond to cybersecurity events and incidents. * Must be able to obtain and maintain the required clearance for this role * Work ...

Deloitte

Security Operations Lead

Tallahassee, FL · On-site

Perform security operations activities to help monitor, analyze, and respond to cybersecurity events and incidents. * Must be able to obtain and maintain the required clearance for this role * Work ...

Forus

Security Operations Lead

Manhattan, NY · On-site

Security Operations Lead As a Security Operations Lead at Forus, you will own the programs that let customers trust us with their most sensitive data. We operate on protected health information to ...

Replit

Security Operations Lead

Foster City, CA · On-site

$295K - $385K/yr

We are looking for a Security Operations Lead (SOC Lead) to build, mature, and operate our 24/7 detection and response capabilities across a modern cloud-native and AI-driven environment. This role ...

Forus Inc

Security Operations Lead

New York, NY · On-site

About the role As a Security Operations Lead at Forus, you will own the programs that enable customers to trust us with their most sensitive data. We handle protected health information to automate ...

Saliense

Security Operations Lead

Alexandria, VA · On-site

Minimum of 10 years' experience providing security operations and penetration testing support. * Minimum 5 years' managing and directing security operations. * Responsible for the ability to ...

Forus Inc

Security Operations Lead

Manhattan, NY · On-site

About the role As a Security Operations Lead at Forus, you will own the programs that enable customers to trust us with their most sensitive data. We handle protected health information to automate ...

gardaworld

Security Operations Lead

Richardson, TX · On-site

$26/hr

Key Responsibilities Lead and oversee the Samsara platform during assigned shifts in a 24/7/365 Security Operations Center. Continuously monitor transportation logistics utilizing the Samsara ...

gardaworld

Security Operations Lead

Richardson, TX

$26/hr

Key Responsibilities Lead and oversee the Samsara platform during assigned shifts in a 24/7/365 Security Operations Center. Continuously monitor transportation logistics utilizing the Samsara ...

GardaWorld

Security Operations Lead

Richardson, TX · On-site

$26/hr

Key Responsibilities Lead and oversee the Samsara platform during assigned shifts in a 24/7/365 Security Operations Center. Continuously monitor transportation logistics utilizing the Samsara ...

gardaworld

Security Operations Lead

Richardson, TX

$26/hr

Key Responsibilities Lead and oversee the Samsara platform during assigned shifts in a 24/7/365 Security Operations Center. Continuously monitor transportation logistics utilizing the Samsara ...

next page

Showing results 1-20

All JobsReal Estate JobsSecurity JobsSecurity Manager JobsSecurity Operations Lead Jobs

Security Operations Lead information

See salary details

$12

$27

$64

How much do security operations lead jobs pay per hour?

As of Aug 28, 2026, the average hourly pay for security operations lead in the United States is $27.95, according to ZipRecruiter salary data. Most workers in this role earn between $18.27 and $31.01 per hour, depending on experience, location, and employer.

What is a Security Operations Lead?

A Security Operations Lead is a professional responsible for overseeing the daily operations of an organization's security team. They manage security analysts, coordinate incident response, and ensure the effective monitoring and protection of digital assets against cyber threats. This role involves implementing security policies, handling escalations, and collaborating with other departments to maintain overall security posture. Security Operations Leads also play a key role in training staff and staying updated on the latest security technologies and threats.

What are the key skills and qualifications needed to thrive as a Security Operations Lead?

To thrive as a Security Operations Lead, you need a strong background in cybersecurity principles, incident response, and risk management, often supported by a relevant degree and certifications like CISSP or CISM. Familiarity with security information and event management (SIEM) tools, intrusion detection systems (IDS), and vulnerability assessment platforms is typically required. Leadership, analytical thinking, and effective communication are crucial soft skills for guiding teams and coordinating responses. These skills ensure proactive threat detection, efficient mitigation of security incidents, and robust organizational protection.

How does a Security Operations Lead typically collaborate with other departments to ensure organizational security?

A Security Operations Lead works closely with various departments such as IT, compliance, and risk management to develop and enforce security protocols. This role often involves coordinating incident response efforts, sharing threat intelligence, and conducting security awareness training across teams. Regular cross-functional meetings and clear communication channels are essential to address vulnerabilities and align security strategies with organizational goals. This collaborative approach helps ensure that security measures are integrated throughout the company’s operations.

What is the difference between Security Operations Lead vs Security Analyst?

AspectSecurity Operations LeadSecurity Analyst
CertificationsCompTIA Security+, CISSP, CISMCompTIA Security+, CEH, GIAC
Work EnvironmentOversees security teams, manages incident response, develops security strategiesMonitors security alerts, analyzes threats, implements security measures
Employer & Industry UsageUsed in organizations with security teams, corporate security departmentsCommon in security operations centers (SOCs), IT departments

The Security Operations Lead typically manages security teams and develops strategies, requiring leadership skills and certifications like CISSP. In contrast, a Security Analyst focuses on monitoring and analyzing security threats, often holding certifications like Security+ or CEH. Both roles are essential in cybersecurity but differ in responsibilities and scope.

What cities are hiring for Security Operations Lead jobs?

Cities with the most Security Operations Lead job openings:

What states have the most Security Operations Lead jobs?

States with the most job openings for Security Operations Lead jobs include:

Security Operations Lead jobs near you
Infographic showing various Security Operations Lead job openings in the United States as of August 2026, with employment types broken down into 88% Full Time, 11% Part Time, and 1% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $58,139 per year, or $28 per hour.

Security Operations Lead

Washington, DC • On-site

Accenture Federal Services
IT Services • 10K+ employees

8.7

Company rating: 8.7 out of 10

Based on 20 frontline employees who took The Breakroom Quiz

50th of 499 rated business services

People enjoy working here

Good employer

Recommended by parents

Learn more about Accenture Federal Servicesexternal

Full-time

Re-posted 16 days ago

Job description

Security Operations Lead (SOC Lead)

Role Summary

The Security Operations Lead will oversee all SOC functions and lead a blended team of SOC Analysts and Security Engineers to ensure rapid detection, investigation, and response to security threats. This role is responsible for driving threat hunting, leading major incidents, engineering detection capabilities, and maturing SOC operations to stay ahead of evolving adversary behaviors. The Lead acts as the central coordination point during security events and sets the strategic direction for the SOC to ensure continuous, mission-critical security coverage.

Key Responsibilities

SOC Leadership & Operations

  • Lead daytoday SOC operations, including queue management, alert triage oversight, escalation handling, oncall rotations, and daily situational reporting.
  • Mentor and develop SOC analysts across tiers; refine SOPs, workflows, and response playbooks.
  • Drive threat hunting activities focused on identifying patterns, outliers, and TTPaligned behaviors across host, network, email, and cloud logs.
  • Oversee SIEM dashboarding, alert tuning, log source health, and rule/correlation development to strengthen detection depth.
  • Coordinate with Security Engineering to ensure logging fidelity, sensor coverage, and integration of new technologies.

Incident Response

  • Lead the full lifecycle of incident response: identification, containment, eradication, recovery, forensics support, and post-incident reporting.
  • Perform or direct deep-dive investigations using SIEM, NDR, EDR, packet analysis tools, and forensic artifacts.
  • Provide expert investigative support for large-scale or complex incidents where technical detections may not be available.
  • Guide analysts during highseverity incidents and act as the primary interface with client leadership and internal stakeholders.
  • Oversee threat intelligence intake and ensure IOCs, adversary behaviors, and campaign indicators are integrated into SOC detections.

Detection Engineering & Threat Analytics

  • Develop and optimize SIEM correlation rules, dashboards, and monitoring logic.
  • Enhance playbooks and automation pipelines to improve consistency and reduce analyst workload.
  • Ensure ongoing alignment to evolving threat actor TTPs, including insider threat and APT-style behaviors.
  • Integrate new data sources into SOC detection pipelines and validate alert efficacy.

Required Qualifications:

  • 8 years of cybersecurity experience, with 3+ years leading SOC or IR teams.
  • Hands-on experience triaging alerts, logs, events, and incident artifacts across enterprise environments.
  • Strong experience with one or more of the following technologies: SIEM (Splunk. Elastic etic), NDR (ExtraHop), EDR/XDR (Trellix), and packet analysis tools.
  • Demonstrated ability to lead incident response for high-severity cybersecurity events.

Preferred Qualifications:

  • Advanced experience in threat hunting, analytics, and adversary behavior profiling.
  • Certifications such as CISSP, GCIH, GCIA, GCED, CEH, or similar.
  • Experience building SIEM/SOAR automations and custom detection content.
  • Familiarity with malware triage, static/dynamic analysis, and IOC development.
  • Experience leading SOCs supporting federal missions or hightempo operational environments.
  • Exposure to cloud security monitoring (Azure/AWS/GCP) and SaaS logging integrations.

What Accenture Federal Services employees say

Pay

Benefits

Hours and flexibility

Workplace

Get the full story on Breakroom

Apply