Security Operations Center Lead

Job Description

The Security Operations Center (SOC) Launch Lead will own the operational integration and launch of a standalone Security Operations Center. This role will establish the SOC’s operating model, stakeholder interfaces, escalation and communication strategy, standard operating procedures, and operator runbooks. The successful candidate will work directly with SOC operators and site stakeholders to build efficient workflows, establish clear accountability, and validate launch readiness. This is a hands-on role requiring daily onsite attendance. The successful candidate will build processes, work alongside frontline teams, and verify execution in the field while collaborating with project leads and relevant stakeholders. This is a temporary position supporting security operations.

Responsibilities

• Define the SOC’s scope of services, responsibilities, operating boundaries, and interfaces with site security and other stakeholders.
• Develop an integrated launch plan with milestones, dependencies, readiness criteria, and accountable owners.
• Establish escalation pathways, notification requirements, communication channels, and stakeholder contact matrices.
• Create standard operating procedures and scenario-based runbooks for monitoring, alarm handling, incident triage, dispatch, escalation, documentation, and shift handoff.
• Partner with IT and security systems teams to validate operator workstations, security applications, alarm workflows, and system interfaces.
• Track technical issues through resolution prior to launch acceptance.
• Define operator responsibilities, required actions, documentation standards, and methods for assessing adherence.
• Identify workflow inefficiencies, duplicate work, unclear handoffs, and opportunities to improve tools or introduce appropriate automation.
• Work alongside SOC operators to test workflows and refine procedures using practical feedback.
• Coordinate training, exercises, and operational readiness validation with relevant stakeholders.
• Track launch risks and issues, resolve operational gaps, and support stabilization following launch.
• Collaborate with security and operational teams to align SOC procedures with site processes, guard operations, and scalable standard work.
• Provide regular progress updates covering readiness, completed milestones, unresolved dependencies, and efficiency improvements.
• Develop and deliver the SOC operating model and launch readiness plan.
• Develop escalation and stakeholder communication strategies.
• Build and maintain a controlled library of standard operating procedures and operator runbooks.
• Maintain training and exercise records and document the resolution of identified gaps.
• Develop a prioritized workflow efficiency plan and complete a documented handoff to ongoing operational owners.
• Complete an organized handoff of approved documentation, open actions, performance measures, and ongoing ownership at the conclusion of the assignment.

Skills and Requirements

• Demonstrated experience launching, integrating, or improving a Security Operations Center (SOC) or comparable command center.
• Experience developing escalation procedures, incident workflows, standard operating procedures, and operator runbooks.
• Strong operational planning, stakeholder coordination, and technical writing skills.
• Ability to work directly with SOC operators, test procedures under realistic operating conditions, and drive issues through resolution.
• Proficiency with Microsoft Excel for action tracking, data analysis, and performance reporting.
• Proficiency with Microsoft Word for procedures, SOPs, and operator runbooks.
• Proficiency with Microsoft Outlook for stakeholder communication and scheduling.
• Hands-on experience with enterprise video management and access control systems such as Milestone and Lenel, or comparable security platforms.
• Working knowledge of alarm monitoring, incident reporting, dispatch workflows, and the interaction between physical security systems and SOC operations.
• Basic understanding of workstation and network connectivity troubleshooting, with the ability to document issues and coordinate resolution with IT and security systems teams.
• Ability to build practical processes, work onsite daily, collaborate across teams, and clearly communicate progress, risks, issues, and decisions.
• Experience supporting large-scale data centers, critical infrastructure, or similarly complex operating environments.
• Experience using Microsoft Teams, SharePoint, or comparable collaboration and document-management tools to maintain controlled procedures and coordinate operations.
• Experience conducting operational acceptance testing and operator training using Milestone, Lenel, or comparable physical security platforms.
• Experience identifying and implementing improvements to alarm, incident response, dispatch, or escalation workflows.
• Experience using reporting, performance data, or automation to improve SOC efficiency and operational consistency.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].