SOC Manager

Role overview Oversee a continuously staffed Security Operations Center for a large cybersecurity program. You will lead its people, processes, and detection platforms, using operational metrics and threat intelligence to improve incident detection and response. The role combines escalation leadership with responsibility for staffing, training, quality, and coordination across security functions.

Responsibilities - Own round-the-clock SOC performance and act as the escalation authority. - Track detection and response measures, including time to detect and time to respond, and lead improvement efforts. - Manage a tiered analyst organization that combines human expertise with AI-enabled capabilities. - Set SIEM and SOAR platform direction and prioritize detection use cases. - Oversee staffing, scheduling, training, and quality assurance. - Coordinate major incident response and post-incident reviews; brief leaders on threats and SOC performance. - Keep playbooks current and work with threat intelligence, vulnerability management, and engineering teams to improve coverage.

Requirements - At least 10 years of cybersecurity experience, including 5 or more years leading a SOC. - Bachelor’s degree in computer science, cybersecurity, or a related field; equivalent experience may be considered. - Strong knowledge of SIEM and SOAR platforms, incident response, and detection engineering. - A record of leading and developing large technical teams in continuous operations. - CISSP, CISM, or GIAC Certified Intrusion Analyst (GCIA) certification.

Nice to have - GCIH certification.