Security Operations Manager

Role overview

What you'll do

• Lead and develop SOC analysts and incident response specialists through operational direction, coaching and support.
• Coordinate investigation, containment, eradication, recovery, stakeholder communications and post-incident reviews during live incidents.
• Assess client security operations and translate identified people, process and technology gaps into practical improvements.
• Advise on SIEM, SOAR, EDR and threat-detection tooling and improve detection and response capabilities.
• Develop incident playbooks, standard operating procedures, automated workflows and tabletop exercises.
• Contribute to service development, coaching, mentoring and knowledge sharing.

Security technologies

• Technology examples include Microsoft Sentinel, Splunk, SOAR automation, Microsoft Defender for Endpoint and CrowdStrike Falcon.
• Work may involve threat intelligence, detection engineering, investigation and incident response technologies.
• Cloud security monitoring may cover Microsoft Azure, AWS and GCP.
• Specific technologies depend on the client environment and engagement.

Working arrangement

• Hybrid working is stated, with an expectation of at least two days per week in an office or client site, depending on role and assignment.
• Work location and time at client sites or offices vary by role; the posting also describes in-person working sessions.

About PA Consulting

Development and community

• The posting describes a supportive cyber and technology community with knowledge sharing, peer support, coaching and mentoring.
• It states that employees can access a development budget for technical and non-technical training and professional certifications.

Requirements

• The source does not provide specific years of experience, certifications or formal qualifications.