Deputy Director - SOC & DFIR (Cyber Security Ops)

SOC Oversight and Operations

• Lead the strategic and day-to-day operations of the in-house central SOC protecting the public healthcare sector.
• Ensure 24/7 monitoring, alert triage, and incident response through robust processes and advanced security tooling.
• Oversee the continuous tuning of detection rules and workflows to optimize SOC efficiency and threat coverage.
• Track and report SOC KPIs, effectiveness, and operational readiness.

Detection Engineering

• Develop and maintain high-fidelity detection logic and SIEM use cases to identify malicious behaviors and sector-relevant threats.
• Work closely with IT and security architecture teams to ensure comprehensive telemetry, logging, and visibility.
• Use threat intelligence and real-world attack patterns to refine detection mechanisms.
• Perform validation and quality assurance of detection content to minimize false positives.