Manager, Security Operations Center
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Operations Center Manager leading Workstreet’s 24x7 client monitoring, detection, and incident escalation operations. Managing analysts, SLAs, security tooling, and compliance-focused service delivery.
Responsibilities:
- Own the day-to-day operation of a 24x7 SOC monitoring client environments
- Lead, coach, and develop a team of 10 or more SOC analysts
- Build and maintain 24x7 shift schedules with appropriate coverage and skill mix
- Recruit, interview, and onboard analysts
- Run training programs and support analyst certification and development goals
- Manage burnout and retention risks in round-the-clock operations
- Own SOC performance against client SLAs and track operational metrics
- Review investigations and escalations for accuracy, completeness, and clarity
- Oversee monitoring across EDR, firewall, IPS, WAF, and SIEM platforms
- Prioritize detection tuning to reduce noise and close coverage gaps
- Maintain SOC runbooks, playbooks, and shift handoff procedures
- Run post-incident reviews and incorporate lessons learned into detections, procedures, and training
- Serve as senior client point of contact for SOC delivery, escalations, and incident communications
- Lead recurring service reviews covering alert volume, notable incidents, trends, and improvements
- Support client onboarding by scoping log sources, tooling, escalation paths, and response responsibilities
- Handle client concerns and escalations
- Report SOC performance, staffing, and risk to Workstreet leadership
- Partner with GRC engineers and vCISOs to support client compliance obligations
- Identify improvements to tooling, automation, and process and develop business cases
Requirements:
- 7+ years of security operations experience
- 3+ years managing a SOC team or comparable security operations function
- Experience running a 24x7 SOC operation
- Experience leading teams of 10 or more analysts, including hiring, performance management, and scheduling
- Strong working knowledge of EDR, firewall, IPS, WAF, and SIEM platforms
- Ability to review investigations and identify missed issues
- Experience owning client relationships and explaining incidents, trends, and SLA performance to technical and executive audiences
- Ability to make sound decisions under pressure and remain composed during escalations
- Clear written and verbal communication skills
- Willingness to work flexible hours when needed for coverage, escalations, or shift transitions
- Active security or leadership certification such as CISSP, CISM, GCIH, GCIA, or equivalent
- Prior MSSP experience supporting multiple client environments simultaneously
- Hands-on administration, configuration, maintenance, and tuning of EDR, SIEM, firewall, IPS, or WAF platforms
- Experience with automation, including Python, PowerShell, or SOAR playbook development
- Familiarity with SOC 2, ISO 27001, or HIPAA compliance frameworks
- Experience building SOC metrics, dashboards, and client/leadership reporting
- Excellent written and verbal English communication skills
- Reliable high-speed internet connection and professional home office environment
- Ability to work 8:00 AM–5:00 PM U.S. Eastern Time
- Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities
- Must participate in live video interviews with camera on and verify identity during recruitment and onboarding
- Employment contingent upon identity verification and background screening, where permitted by law
- Must be authorized to work in the U.S. without visa sponsorship now or in the future
Benefits:
- Career development with mentorship and training opportunities
- Reimbursement for approved training and certification courses relevant to the current role
- Competitive base salary
- Regular performance reviews linked to merit-based appraisals
- Bonus opportunities
- Significant room for career advancement
- Remote-first culture with flexibility to work from anywhere while collaborating with a global team
Similar Jobs
Cloud Architect – Operations, Security Governance
Arquitecto Cloud senior diseñando modelos operativos y de madurez de seguridad para Landing Zones AWS. Definiendo estándares, controles y roadmaps para entornos empresariales bancarios.
Senior Manager, Security Incident Response
Senior security leader directing global investigations and incident response for Affirm’s transparent fintech payment platform. Building scalable response, AI-enabled workflows, and executive risk reporting.
Senior Manager, Security Incident Response
Senior security leader directing Affirm’s global incident response and investigations. Building scalable detection, readiness, and AI-enabled security capabilities for fintech payments.
SOC Analyst
SOC Analyst monitoring Consensys’s blockchain infrastructure, enterprise systems, and Web3 protocols. Detecting threats, responding to incidents, and securing Linea and Lineth ZK-rollup ecosystems.
Senior Manager, A&D Security Operations
Senior Manager leading acquisition and divestiture cybersecurity operations for Johnson & Johnson’s global healthcare businesses. Managing transaction portfolios, risk governance, post-close coordination, and operational maturity.
Senior Manager, A&D Security Operations
Senior Manager leading cybersecurity operations for Johnson & Johnson acquisitions and divestitures. Managing transaction portfolios, risk governance, integrations, and executive reporting.
Cloud Architect – Operations, Security Governance
Cloud Architect definiendo modelos operativos, madurez de seguridad y roadmaps para Landing Zones AWS empresariales en Keppri. Impulsando gobierno, resiliencia, automatización y estandarización cloud.
Director, Global Security Operations Center
Director leading Twilio’s 24/7/365 global security operations center. Protecting Twilio’s communications technology, people, assets, and operations through intelligence-driven physical security.
Security Operations Analyst L2 – SOC
Security Operations Analyst monitoring alerts, investigating incidents, and maintaining compliance for Supply Chimp’s US government supply and logistics operations. Improving security tools, documentation, and controls remotely from Colombia.
Network Operations Security Engineer
Network Operations Security Engineer securing AXON Networks’ AI-driven ISP orchestration platform, routers, cloud, and Kubernetes services. Coordinating vulnerability remediation, incident readiness, and production security across North America.
Security Operations Team Lead
Security Operations Team Lead leading incident response, agentic SOC operations, and security engineering at Cyera. Securing enterprise AI adoption through internal customer-zero operations.
SecOps Engineer
SecOps Engineer monitoring threats and managing security operations for compliance software serving 50,000+ organisations globally. Supporting incident response, vulnerability management, cloud security, and regulatory compliance.
IAM Security Operations Engineer – Middle
IAM Security Operations Engineer maintaining secure identity services for SOFTSWISS. Managing JML lifecycle processes, RBAC access, Keycloak, Adaxes, and IAM integrations.
Blue Team Analyst – SOC
Analista Blue Team monitorando eventos, ameaças e incidentes em SOC para a It4us Cyber Security. Operação remota com ferramentas SIEM e suporte a clientes.
SOC Analyst II
SOC Analyst II protecting small and medium-sized businesses with enterprise-class cybersecurity. Leading threat investigations, incident response, threat hunting, and vulnerability management.
Manager, Information Security Operations
Information Security Operations Manager leading Malwarebytes’ global Security Operations team. Owning SIEM, incident response, vulnerability management, threat hunting, DLP, and AI security for its cybersecurity business.
Manager, Information Security Operations
Security operations manager leading global SecOps, incident response, and threat management for Malwarebytes cybersecurity and ThreatDown MDR. Building resilient 24x7 protection across distributed teams and systems.
Senior SOC Analyst
Senior SOC Analyst leading high-severity investigations, threat hunting, malware analysis, and forensics. Strengthening detection and response for DeepSeas’ global cybersecurity clients.
SOC Analyst, SIEM Engineer
SOC Analyst/SIEM Engineer monitoring and improving security systems for secupay AG, a German omnichannel payments provider. Investigating incidents and optimizing FortiSIEM detection capabilities.
Security Operations Analyst
Security Operations Analyst monitoring and investigating threats across client environments for Workstreet’s managed security and compliance services. Tuning detections, guiding remediation, and supporting 24x7 SOC coverage.