Cyber Operations Team Lead

About the role

We are seeking an experienced Cyber Operations Team Lead to manage a group of Threat Operations Analysts. The role focuses on delivering high‑quality, accurate, and efficient cyber threat and vulnerability services while acting as the senior escalation point for complex technical cases.

Key responsibilities

• Lead, mentor, and develop a team of Threat Operations Analysts.
• Oversee daily workflows, case allocation, workload distribution and service‑level agreements.
• Review analyst findings, threat advisories, vulnerability assessments and attribution analysis.
• Ensure timely and consistent customer notifications.
• Handle complex exposure validation, asset attribution, unusual detections and high‑impact vulnerabilities.
• Collaborate with Threat Research, Engineering and Data teams on detection patterns, automation, tooling and dataset improvements.
• Drive continuous improvement of processes, documentation, playbooks and operational capabilities.
• Support customer and stakeholder engagements for complex technical cases.
• Contribute to the roadmap and evolution of proactive cyber risk‑reduction services.

Required profile

• Strong experience in cyber security operations, SOC, MSSP, threat monitoring or vulnerability management.
• Proven track record of leading, mentoring or managing cybersecurity analysts.
• Excellent analytical and problem‑solving abilities.
• Ability to translate complex technical findings into clear, actionable customer communication.
• Experience working with distributed or global teams is a plus.

Required skills

• Deep understanding of TCP/IP, ports, DNS and common internet‑facing services.
• Knowledge of vulnerability mechanics, exploitation principles, CVE and CVSS scoring.
• Familiarity with adversary behaviours, threat verification and exposure validation.
• Asset attribution and mitigation analysis.
• Hands‑on experience with tools and datasets such as Shodan, Censys, LeakIX, Nuclei, DNS/WHOIS investigations.