Takes ownership of the SOC operations and responsible for maintaining smooth operations, ensuring service-level agreements (SLAs) are met, and following policies and procedures.
Manage the overall day-to-day operations, and responsible for ensuring events and/or incidents are detected and responded to in adherence to established processes as well as procedures.
Oversee the analysts? daily tasking.
Manage the team?s scheduling.
Ensure effective incident management.
Identify chronic operational and security issues, and ensure they are managed appropriately.
Manage and escalate roadblocks that may jeopardize security monitoring operations, infrastructure, and SLAs.
Serve as a senior mentor to SOC staff.
Interface and collaborate with outside teams.
Track tactical issues in execution of SOC responsibilities.
Provide documentation and track analyst training requirements.
Ensure analysts follow existing procedures, and that all procedures are documented in accordance with local guidelines.
Manage the Service Improvement process of the SOC Framework.