SOC Manager

About the Role:

We are seeking an experienced and driven SOC Manager to lead and grow our Security Operations in a dynamic and fast-paced environment.

This role is responsible for managing day-to-day operations within our Cyber Fusion Center, including real-time threat detection, incident response, team development, and detection quality. The SOC Manager serves as a key liaison between analysts, engineering teams, and executive stakeholders - ensuring security excellence across both cloud and on-premise environments

Responsibilities:

• Oversee end-to-end operations of the Cyber Fusion Center, including 24/7 monitoring, triage, response, and escalation across hybrid environments.

• Lead and manage a team of cybersecurity analysts, driving performance, professional growth, and capability development.

• Manage the full lifecycle of security incidents, including investigation, containment, communication, and lessons learned.

• Continuously refine and improve detection rules, investigation playbooks, and threat hunting practices, aligning with frameworks like MITRE ATT&CK.

• Collaborate with IT, engineering, DevOps, risk, and compliance teams to ensure alignment between operational activities and business objectives.

• Deliver regular metrics, dashboards, and incident trend analysis to executive stakeholders.

• Maintain and evolve the security tooling stack, including SIEM, SOAR, EDR, and threat intelligence platforms.

• Support automation and workflow orchestration initiatives using scripting or API integrations.

• Ensure readiness and participation in a 24/7 response model when needed.

• Drive analyst training and development, maintaining a high-performing team culture.

• Stay ahead of evolving threats and ensure the team is equipped to respond effectively

Candidate requirements:

• Minimum 5-8 years of experience in security operations, with at least 2 years in a leadership or managerial capacity.

• Proven experience leading SOC operations, incident response programs, or threat detection teams.

• Experience managing and developing a security team, including hiring, mentoring, and performance review.

• Strong understanding of SIEM, SOAR, EDR, and threat intelligence platforms.

• Familiarity with security process automation, detection rule tuning, or security content development.

• Familiarity with security frameworks (MITRE ATT&CK, NIST, ISO 27001, etc.).

• Experience with cloud security operations (AWS, Azure, GCP).

• Ability to manage high-pressure incidents, make sound decisions, and communicate clearly with technical and non-technical stakeholders.

• Excellent communication, leadership, and stakeholder management abilities.

• Experience in preparing operational reports (monthly, quarterly) and presenting findings or recommendations.

• Industry certifications such as GCIA, GCIH, GCFA, CEH, CompTIA CySA+, or equivalent.

Why Join Us:

• Shape and mature security operations practices with real ownership and executive support.

• Collaborate with cross-functional experts across technology, risk, and compliance domains.

• Access ongoing development and industry-leading tooling in a forward-thinking Security Operations environment.