Employer description & source details
Supervise day-to-day SOC operations once the AI-driven platform is operational, owning the quality and outcomes of the SOC's detection and response. Review and validate the AI platform's alerts, verdicts and investigations; confirm true positives, dismiss false positives with rationale, and identify cases the automation has under- or over-weighted. Take decisive action when human judgement is required — initiating containment, response and remediation, or authorizing/overseeing automated response actions. Serve as the global point of accountability for the SOC's operational outcomes, maintaining situational awareness of the threat picture across the entire portfolio. Lead investigation and response for escalated and high-severity incidents, coordinating with the USA-based Senior Manager, IT teams, plant O&M and external responders as needed. Drive incidents through the full lifecycle — triage, containment, eradication, recovery and post-incident review — with clear documentation and lessons learned. Manage handovers between the Global coverage windows so that no incident is dropped across time zones. Monitor and respond to security events affecting OT/SCADA and BESS environments across Enfinity's solar plants, applying OT-aware judgement (safety, availability and process impact, not just IT impact). Apply and uphold relevant standards and regulatory requirements, including IEC 62443 and NIS2, in monitoring and response decisions. Coordinate with the OT security specialist(s) and SCADA/engineering teams on OT-specific detections and response actions. Platform supervision, tuning & threat hunting Oversee the steady-state health and effectiveness of the AI SOC platform — detection coverage, data-source/telemetry health, and integration with the XDR/SIEM and OT monitoring s
Extracted skills: cybersecurity, security, finance, operations