AI Summary
Evaluate and improve SOC operations, incident response actions, and detection workflows. Must have hands-on experience in SOC operations, incident response leadership, or cybersecurity operations.
Key Highlights
Evaluate detection alert pipelines, triage workflows, and escalation pathways
Assess incident response actions across real or simulated timelines
Identify critical gaps in logging coverage, detection logic, and containment procedures
Key Responsibilities
Evaluate detection alert pipelines, triage workflows, and escalation pathways for quality and consistency
Assess the completeness and effectiveness of incident response actions across real or simulated timelines
Identify critical gaps in logging coverage, detection logic, and containment procedures
Technical Skills Required
Benefits & Perks
Fully remote and flexible work
Freelance autonomy with meaningful, structured task-based work
Potential for ongoing work and contract extension
Nice to Have
Familiarity with SIEM platforms (e.g., Splunk, Sentinel, Chronicle)
Experience with EDR tools and cloud-native detection systems
Background in threat intelligence, purple teaming, or adversary simulation
Job Description
About The Role
What if your hard-won experience in the SOC trenches could directly strengthen how organizations detect, respond to, and contain real threats? We're looking for a seasoned Incident Response Lead to independently evaluate SOC operations — reviewing detection workflows, stress-testing playbooks, and surfacing the gaps that keep security teams up at night.
This is a fully remote, flexible contract engagement. If you've lived through real incidents, built response processes from scratch, or spent time hunting for what others missed — this is work that will feel both familiar and meaningful.
- Type: Hourly Contract
- Location: Remote
- Commitment: Flexible
- Evaluate detection alert pipelines, triage workflows, and escalation pathways for quality and consistency
- Assess the completeness and effectiveness of incident response actions across real or simulated timelines
- Identify critical gaps in logging coverage, detection logic, and containment procedures
- Review and validate incident response playbooks for clarity, accuracy, and operational feasibility
- Summarize recurring incident patterns and pinpoint operational bottlenecks
- Support ongoing assessments of SOC maturity and overall response readiness
- Deliver structured, analytical documentation that drives actionable improvements
Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.
Who You Are
- Hands-on experience in SOC operations, incident response leadership, or cybersecurity operations
- Strong working knowledge of detection engineering, response workflows, and incident lifecycle management
- Sharp analytical thinking with the ability to translate findings into clear, structured written assessments
- Comfortable working independently and delivering consistent, high-quality evaluations
Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.
- Familiarity with SIEM platforms (e.g., Splunk, Sentinel, Chronicle)
- Experience with EDR tools and cloud-native detection systems
- Background in threat intelligence, purple teaming, or adversary simulation
- Relevant certifications such as GCIH, GCFA, CISSP, or equivalent
- Apply deep security expertise to work that has a real, measurable impact on organizational resilience
- Fully remote and flexible — complete assessments on a schedule that works for you
- Freelance autonomy with meaningful, structured task-based work
- Engage with a diverse range of SOC environments, toolsets, and operational challenges
- Potential for ongoing work and contract extension across new assessments and engagements
Similar Jobs
Explore other opportunities that match your interests
Visa Sponsorship
Relocation
Remote
Job Type
Contract
Experience Level
Mid-Senior level
sgi
United State
Visa Sponsorship
Relocation
Remote
Job Type
Full-time
Experience Level
Mid-Senior level
Blue Lake Consulting Group
United State
Visa Sponsorship
Relocation
Remote
Job Type
Full-time
Experience Level
Associate
netrolynx ai
United State