Team Lead, Security Operations Center

Paysafe is a global payments platform powering the experience economy, with a strong focus on the iGaming, video gaming, e-commerce, retail, travel and hospitality sectors. With 30 years of expertise in payment technology, Paysafe helps businesses and consumers lift every experience through seamless, secure payment solutions, including card payments, digital wallets such as Skrill, eCash solutions like PaysafeCard, and a suite of local payment methods. With approximately 2,900 employees across 12 countries and annualized transactional volume of $167 billion in 2025, Paysafe connects people and businesses worldwide through innovative digital payment experiences. Lead and support the SOC L1 team to ensure effective 24×7 detection, triage, and escalation of security events. Partner closely with the Cyber Incident Response Team (CIRT) to ensure consistent incident handling, high quality analysis, and continuous improvement through coaching, collaboration, and clear processes. What to expect: Coordinate and oversee day to day SOC L1 activities, including shift planning and priority setting Review alerts, tickets, and triage notes to ensure quality, accuracy, and SLA/KPI alignment Coach and develop analysts through feedback, training, calibration sessions, and post incident reviews Escalate confirmed or complex incidents to CIRT and collaborate on playbooks and escalation criteria Analyze alert and log trends to identify gaps, tuning opportunities, and false positives Focus primarily on people leadership and process improvement, with limited hands on analyst work (under 20%) To be successful you need to have: 3+ years of experience in a SOC, including 1–2 years in a leadership or supervisory role Practical experience with SIEM, EDR, IDS/IPS, logging platforms, and related security tools Strong skills in incident triage, log analysis, and escalation Working knowledge of incident response processes and forensic fundamentals Clear, inclusive communication skills and a collaborative coaching approach Considered nice to have: Industry certifications (e.g., GCIA, GCIH, GSEC, CISSP, CEH, Splunk, QRadar) Experience supporting 24×7 operations and on call rotations Exposure to playbook development and SOC metrics reporting We offer in return: The opportunity to write the history of a leading and growing multinational company Tailor-made training and ongoing development to help you enhance your skills in the field of online payments Multiple career progression opportunities in a dynamic in-house business Environment where product expertise, professional and personal commitment are rewarded Competitive remuneration and social benefits package (25 days annual paid leave, 4 days paid volunteering time a year through our Paysafe Giving initiative, health insurance, sports card, team events, company discounts, variety of soft skills, business and technical training programs) Fun and collaborative working atmosphere Flexible working model - we encourage our employees to embrace our flexible working approach. You will be expected to work from home and spend an average of three days a week at our Sofia office as part of our hybrid work model Are you ready to take your career to the next level? Join our team that is inspired by a unified vision and propelled by passion. Send your CV in English. Only shortlisted candidates will be contacted for an interview. Wondering how our interview process looks like now? Learn more here: https://bit.ly/paysafeinterviews Equal Employment Opportunity Paysafe provides equal employment opportunities to all employees, and applicants for employment, and prohibits discrimination of any type with regard to ethnicity, religion, age, sex, national origin, disability status, sexual orientation, gender identity or expression, or any other protected characteristics. This policy applies to all terms and conditions of recruitment and employment. If you need any reasonable adjustments please let us know. We will be happy to help and look forward to hearing from you.