Cyber Operations Team Lead

About the role

We are looking for an experienced Cyber Operations Team Lead to head our Threat Operations team. In this role you will strengthen our cyber exposure assessment and threat monitoring capabilities while guiding a group of analysts toward high‑impact results.

Key responsibilities

• Lead, mentor, and develop a team of Threat Operations Analysts.
• Manage daily workflows, case allocation, service‑level agreements and quality reviews.
• Oversee the accuracy and timeliness of threat and vulnerability notifications.
• Act as the senior escalation point for complex exposure validation and high‑impact vulnerabilities.
• Collaborate with Threat Research, Engineering, and Data teams on detection, automation, and tooling improvements.
• Drive continuous improvement of operational processes, playbooks, and workflows.
• Support customer‑facing technical discussions and ensure clear, actionable communication.
• Contribute to new detection logic, service capabilities, and the Cyber Operations roadmap.

Required profile

• Senior experience in Cyber Operations, SOC, MSSP, Threat Monitoring, or a similar environment.
• Proven experience leading or mentoring analysts and managing operational workflows.
• Strong understanding of TCP/IP, ports, protocols and internet‑facing services.
• Deep knowledge of vulnerabilities, CVE/CVSS, adversary behaviour and exploitation principles.
• Hands‑on experience with Shodan, Censys, LeakIX, Nuclei, DNS/WHOIS investigations.
• Experience in exposure validation and threat verification.
• Strong technical communication and stakeholder management skills.
• Experience working with distributed or global teams is a plus.
• Relevant certifications such as Security+, CySA+, Network+, GIAC, eLearnSecurity are desirable.

Required skills

• TCP/IP, ports, protocols
• Vulnerability analysis (CVE, CVSS)
• Shodan
• Censys
• LeakIX
• Nuclei
• DNS investigations
• WHOIS investigations