Manager SOC - Cyber Security

Role overview

What you will do

• Lead response to high-severity incidents, coordinating containment and resolution with CSIRT teams as needed.
• Assess escalated L2 SOC issues for business risk and communicate incident causes and containment measures to clients.
• Review security logs and rules and recommend improvements to threat detection.
• Tune SIEM events with engineers and improve alert detection.
• Maintain incident response playbooks and identify automation opportunities.
• Develop threat use cases with CTI teams using adversary tactics, techniques, and procedures.
• Review critical events and tickets and recommend incident management improvements.
• Track incidents against SANS and MITRE ATT&CK frameworks.
• Provide technical leadership and guidance to SOC analysts.
• Stay informed about threats, tools, cloud security, and SaaS developments.

What you bring

• Over 7 years of highly technical SOC experience.
• Hands-on experience with Microsoft Sentinel or other SIEM and SOAR technologies.
• Relevant certifications such as CISSP, CISM, SANS, CISA, CompTIA Security+, CompTIA CySA+, or GIAC are listed.
• Additional experience listed includes endpoint and cloud security, vulnerability assessment, malware analysis, and reverse engineering.
• Knowledge of control frameworks, risk assessment, asset lifecycle management, patch and vulnerability management, security architecture, and endpoint management is listed.
• Leadership experience managing complex projects and mentoring analysts is listed.
• Strong communication skills for presenting strategies and insights to stakeholders.
• Business development experience, including research, analysis, and proposal writing, is listed.

Schedule

• The role may involve off-hours shift coverage, rotations, or on-call duties.

Compensation

• Expected base salary range is $73,500–$122,500; the role may be eligible for bonus awards.
• Salary placement depends on location, skills, competencies, and qualifications.

About KPMG