SOC Team Lead

About DXC Bulgaria   We are DXC – a Fortune 500 global IT services leader. In Bulgaria, we are among the largest IT employers, delivering the full spectrum of the company’s diverse technical portfolio. Our teams work across cutting-edge technologies, contributing to projects that span industries and geographies. We foster continuous learning and professional growth, offering access to targeted training and certifications aligned with individual interests and career aspirations. Our culture of collaboration, innovation, and shared values empowers professionals to grow and succeed.

We are excited to announce an opportunity for a SOC L1/L2 Team Lead to join and help expand DXC’s SOC team. In this role, you will lead day-to-day SOC operations, driving effective monitoring, incident response, and continuous improvement across the team. D aily challenges Organize, manage and prioritize the work of the Security Monitoring and Response team and ensure accountability. Manage the L1 & L2 team to ensure timely triage, enrichment, and investigation of incidents and alerts are in line with the agreed standard operating procedures. Oversee incident escalations from L1, L2 and L3 and escalate appropriately to the Senior Security Lead. Overall responsibility for the maintenance of the knowledge base, ensuring that process updates and lessons learned have been reflected appropriately. Works closely with Service Integration and Management team to ensure Service Level Agreements compliance, taking proactive steps to address breaches or delays. Performance Management of the L1 team - monitor and evaluate team and individual performance. Participate in customer-facing meetings. Lead the onboarding of new L1 and L2 analysts, ensuring they are equipped with the tools, access, and knowledge required to operate effectively from day one. e X perience and skills required Previous experience in a SOC environment, with at least 1 year in a senior analyst or team lead capacity, demonstrating hands-on expertise across monitoring, triage, and incident response. Strong technical proficiency in SIEM platforms and security tooling (e.g., Splunk, Microsoft Sentinel, QRadar), with the ability to oversee alert triage, incident investigation, and escalation processes in line with defined SOPs. Proven leadership and people management experience, including performance management, shift scheduling, and the ability to motivate and develop a team of L1 and L2 analysts in a high-pressure, 24x7 operational environment. Excellent communication and stakeholder management skills, with the ability to participate in customer-facing meetings, liaise with Service Integration and Management teams, and clearly escalate critical incidents to senior leadership. C ompany benefits At DXC Technology, we don’t just offer jobs - we build careers. Here’s what you can look forward to when you join us: Enjoy competitive compensation and grow your career in a fast-paced, international environment. Benefit from 24 days of paid vacation to rest, explore, and recharge - plus comprehensive medical and life insurance, and monthly food vouchers to support your lifestyle. Access premium learning platforms, get company-sponsored certifications, and grow your skills with continuous development opportunities tailored to you. Get recognized through our Employee Recognition Program - your contributions deserve the spotlight. Refer great talent through our Employee Referral Program and get rewarded for helping shape our future. Enjoy discounts and special offers with your employee badge - it pays to be part of the team. Access 24/7 support for you and your family, with a wide range of wellbeing resources to help you thrive. Join meaningful initiatives that give back to the community and connect you with like-minded colleagues through fun and impactful experiences. At DXC Technology, we believe strong connections and community are key to our success. Our work