Altera
Cyber Offense, SOC, and IR Lead
San Jose, California, United States · Senior
Sponsorship not specified$149k-$216kDetected 8 days ago
AWSGCPAzureCloud PlatformsCybersecurityNetwork SecuritySIEMMicrosoft SentinelMicrosoft DefenderSOARUEBASOC OperationsDetection EngineeringIncident ResponseComplianceIntellectual PropertyLeadershipCommunicationCollaborationCISSP
Stay score
odds of building a lasting career here
61Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role90
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
13 transfer filings in the last year, covering 13 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- This role combines security operations leadership, incident response, detection engineering, and continuous improvement.
- You will establish and mature SOC processes, response playbooks, escalation procedures, operational metrics, and global handoff models while working closely with security engineering, IT, cloud, identity, threat intelligence, and other cross-functional teams.
- You will also leverage automation, SOAR capabilities, threat intelligence, threat hunting, and MITRE ATT&CK-aligned detection strategies to improve the effectiveness and scalability of the SOC.
Responsibilities
- Lead daily SOC operations across monitoring, alert triage, investigation, escalation, incident response coordination, and operational handoff across global time zones.
- Own and mature SOC operating procedures, including incident intake, severity classification, escalation paths, response playbooks, major incident communications, and post-incident reviews.
- Manage and improve security monitoring across SIEM, SOAR, EDR/XDR, email security, cloud security, identity security, vulnerability signals, network telemetry, and threat intelligence sources.
- Build, tune, and continuously improve detection use cases aligned to enterprise risks, MITRE ATT&CK techniques, threat intelligence, audit findings, and business-critical assets.
- Lead incident response coordination for security events involving endpoint compromise, identity misuse, phishing, malware, data loss indicators, cloud misconfigurations, suspicious network activity, and unauthorized access attempts.
- Support implementation and operationalization of SOAR playbooks, automation workflows, enrichment logic, and incident response runbooks.
- Drive continuous improvement through tabletop exercises, incident retrospectives, purple-team findings, threat hunting outputs, and lessons learned.
- Maintain alignment with security governance, regulatory, privacy, and audit requirements by ensuring SOC processes are documented, repeatable, measurable, and evidence-ready.
Requirements
- Bachelor's degree in Computer Science, Computer Engineering, Information Security, Cybersecurity, or a related field, or equivalent practical experience.
- 8+ years of progressive cybersecurity experience, including significant hands-on experience in security operations, incident response, threat detection, or SOC leadership.
- 3+ years of experience leading SOC analysts, incident response teams, managed security operations, or cross-functional cyber defense workflows.
- Strong working knowledge of SIEM, SOAR, EDR/XDR, cloud security monitoring, identity security, email security, network security, and incident response processes.
- Experience coordinating investigations involving phishing, malware, endpoint compromise, suspicious authentication, privileged access misuse, data exposure, and cloud security events.
- Familiarity with frameworks and standards such as MITRE ATT&CK, NIST CSF, NIST SP 800-61, ISO 27001, CIS Controls, or equivalent cyber defense frameworks.
- We use artificial intelligence to screen, assess, or select applicants for the position. Applicants must be eligible for any required U.S. export authorizations.
- Applicants must be eligible for any required U.S. export authorizations.
- Demonstrated experience building or improving detection use cases, alert triage workflows, response playbooks, escalation procedures, and SOC metrics.
- Ability to communicate clearly with technical teams, business stakeholders, senior leadership, and external partners during security incidents.
- Strong analytical, documentation, prioritization, and decision-making skills in high-pressure operational environments.
- CISSP, Security+, or equivalent industry certification.
Nice to have
- Experience operating or transforming a global SOC in an enterprise environment.
- Experience working as an Incident Commander, leading IR execution for the company.
- Experience working with Microsoft Sentinel, Microsoft Defender XDR, KQLs, UEBA, or comparable security operations platforms.
- Experience with threat hunting, purple-team collaboration, adversary emulation, or detection engineering.
- Experience managing managed detection and response providers or outsourced SOC services.
- Experience in semiconductor, technology, manufacturing, or intellectual property-intensive environments.
- Familiarity with GenAI-assisted SOC workflows, including alert enrichment, analyst productivity, incident summarization, and security automation.
- Additional certifications such as CEH, or similar.
Skills
- Improved detection coverage across high-risk assets, identity systems, cloud services, endpoints, and enterprise applications.
Compensation
- The pay range below is for Bay Area California only.
- Actual salary may vary based on a number of factors including job location, job-related knowledge, skills, experiences, trainings, etc.
- We also offer incentive opportunities that reward employees based on individual and company performance.
- $149,100 - $215,925 USD
Benefits
- Partner with security engineering teams to improve log onboarding, data quality, telemetry coverage, alert fidelity, automation, and response integrations.
- Serve as a security operations lead for global SOC coverage and cross-functional collaboration.
This listing is sourced directly from Altera's careers page and normalized into a canonical job model.