SOC Manager

Role overview

Responsibilities

• Manage SOC analysts and security engineers and provide operational leadership.
• Lead complex security incidents and improve detection and response processes.
• Oversee security monitoring, threat analysis, and vulnerability coordination.
• Develop and tune SIEM rules, detection use cases, dashboards, alerts, and queries.

Required qualifications

• Bachelor’s degree in computer science, information technology, engineering, or a related field.
• 8+ years of cybersecurity experience with substantial hands-on SOC, monitoring, incident response, or security engineering experience.
• Demonstrated experience managing or leading an enterprise SOC team.
• Hands-on SIEM experience with Microsoft Sentinel, Splunk, QRadar, Elastic, or equivalent.
• EDR/XDR experience with Microsoft Defender, CrowdStrike, SentinelOne, or equivalent.
• Knowledge of network security, Windows and Linux security, Active Directory, Entra ID/Azure AD, authentication, privileged access, and endpoint security.
• Hands-on cloud security monitoring and incident response in Azure and/or Google Cloud.
• Knowledge of incident response, threat hunting, malware analysis concepts, vulnerability management, and security investigations.
• Experience tuning SIEM detections and knowledge of MITRE ATT&CK, threat intelligence, IOC analysis, and incident classification.
• Working knowledge of PowerShell, Python, Bash, or equivalent scripting and automation.
• Knowledge of ISO 27001, NIST CSF, CIS Controls, and related security practices.

Preferred certifications

• CISSP is listed as a preferred certification.
• GIAC certifications such as GCIH, GCIA, or GCFA are an advantage.
• CSA, Security+, CySA+, or equivalent are listed certifications.
• Microsoft SC-200 and Microsoft Cybersecurity Architect Expert or equivalent are advantages.

Work location

• Work location is in person.