> Markdown version of [/jobs/ext/1867409-soc-program-lead](https://www.wearedevelopers.com/jobs/ext/1867409-soc-program-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SOC Program Lead

- **Company:** Soar
- **Location:** Leiden, Netherlands
- **Experience:** Expert
- **Contract:** Temporary contract
- **Skills:** Cyber Security, Security Information and Event Management, Working Model 2D, Splunk, Security Orchestration, Automation & Response
- **Published:** August 1, 2026
- **Apply:** https://www.careerjet.nl/job/nl4a374b48a392df3207dc34f54fd56056/eaa

## About the Role

* 5+ years of experience in SOC, Security Operations, Cybersecurity Program Management, or related security leadership roles.
 * Strong knowledge of: SOC operations SIEM technologies (preferably Splunk) SOAR platforms and security automation Incident Response processes
 * Excellent stakeholder management and communication skills.
 * Ability to connect business, operational, and technical teams.
 * Experience working in an in-house security environment (consulting-only backgrounds are less relevant but not a breaking point).
 * Strong organizational and program leadership capabilities.

Ideal Candidate

 * SOC Program Lead / SOC Manager/ SOC Lead with Splunk exposure.
 * Security Operations professional who understands SIEM/SOAR ecosystems but is not necessarily a hands-on engineer, more on the operational side.
 * Strong communicator capable of driving alignment across multiple teams and functions.
 * Experience supporting SOC transformation, automation, or modernization initiatives.

Key Selling Points

 * Strategic role within a Global SOC transformation program.
 * Opportunity to help build and scale SOAR capabilities.
 * Flexible hybrid working model.
 * Long-term 12-month engagement with high visibility and impact.

## Description

Location: Leiden, Netherlands Working Model: Hybrid (2 days onsite, flexibility offered) Contract Duration: 12 months Language: Fluent English required
Overview
Our client is looking for a SOC Program Lead to strengthen expertise within the Splunk and SOAR domain as part of a strategic initiative to build and mature SOAR capabilities within the Global SOC.
This is not a hands-on engineering position. The ideal candidate will act as a bridge between operational, security, and technical teams, ensuring alignment and successful delivery of the SOC automation roadmap., * Lead and coordinate the development and implementation of SOAR capabilities within the Global SOC.

 * Act as the key interface between SOC operations, incident response teams, and technical stakeholders.
 * Drive Splunk and SOAR-related initiatives from an operational and program perspective.
 * Facilitate communication across teams and ensure successful collaboration.
 * Support the evolution of a tierless SOC operating model where analysts also participate in incident response activities.
 * Provide guidance and subject matter expertise around SOC processes, SIEM operations, and security automation.


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Machine Learning for Software Developers (and Knitters)](https://www.wearedevelopers.com/videos/154-machine-learning-for-software-developers-and-knitters)
- [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement)
- [The Neuro-Architecture of Productivity: How Work Environments Impact Cognitive Performance](https://www.wearedevelopers.com/videos/1122-the-neuro-architecture-of-productivity-how-work-environments-impact-cognitive-performance)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)