SOC Team Leader

Company Description

At Check Point, what you do matters. Every day, we protect over 100,000 organizations worldwide from increasingly sophisticated cyber and AI-driven threats, securing their AI transformation.
 
Our prevention-first approach safeguards hybrid networks, cloud environments, digital workspaces, and AI systems, stopping attacks before they happen.
 
This is where innovation meets real-world impact. You’ll help customers across industries operate with confidence in a rapidly changing digital world, working alongside smart, curious people who take ownership, challenge assumptions, and solve complex problems.
 
We’re proud to be recognized by TIME, Newsweek, and Forbes for excellence and workplace culture.
 
What really sets Check Point apart is the opportunity to grow, contribute, and help companies navigate their AI transformation securely.
 
If you’re excited to work at the forefront of AI-driven security on a global scale, this is the place to do it.

Job Description

• Lead and develop a team of SOC analysts, growing their skills and owning their day-to-day performance
• Take ownership of complex and high-severity incidents, from detection through containment, resolution, and lessons learned
• Manage shift coverage and scheduling to maintain continuous security operations
• Help design our Security Orchestration, Automation and Response (SOAR) playbooks, and serve as the approver for any changes to them
• Propose new automation flows that speed up investigations and take repetitive work off the team
• Improve detections, investigation workflows, and runbooks — and measure whether the changes worked
• Design and apply AI and agent-based capabilities to strengthen detection, investigation, and response
• Define and build SOC key performance indicators (KPIs), and report on performance, incident trends, and risk insights to management
• Partner with engineering, IT, threat intelligence, and other teams during investigations and improvement work
• Hire, onboard, and train new analysts
• Set the standard for clear, professional, service-oriented communication with employees

Qualifications

• 4 or more years in a SOC or similar cyber security role, including hands-on work on high-severity incidents

• Experience leading or mentoring analysts
• Hands-on experience designing, building, and maintaining SOAR playbooks and security automations
• Hands-on experience with SIEM, EDR, XDR, External Attack Surface Management (EASM), and Cloud Detection and Response (CDR) platforms
• Experience using and designing AI and agent-based tools for security work
• Strong understanding of IT infrastructure, operating systems, cloud environments, and networking fundamentals
• Deep knowledge of common cyber threats and attack techniques, including phishing, malware, ransomware, credential theft, and supply-chain attacks
• Familiarity with the MITRE ATT&CK framework and threat modeling
• Sharp analytical thinking and steady judgment under pressure
• Strong written and verbal English communication skills