Manager, Security Operations Center

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of the daily operations of a 24x7 Security Operations Center (SOC) monitoring client environments.

• Guide, mentor, and nurture a team of 10 or more SOC analysts.

• Develop and maintain 24x7 shift schedules ensuring appropriate coverage and skill mix.

• Oversee the recruitment, interviewing, and onboarding process for analysts.

• Implement training programs and facilitate analyst certification and development objectives.

• Address burnout and retention challenges associated with round-the-clock operations.

• Manage SOC performance in accordance with client Service Level Agreements (SLAs) and monitor operational metrics.

• Evaluate investigations and escalations to ensure accuracy, completeness, and clarity.

• Supervise monitoring activities across EDR, firewall, IPS, WAF, and SIEM platforms.

• Focus on detection tuning to minimize noise and bridge coverage gaps.

• Maintain SOC runbooks, playbooks, and shift handoff procedures.

• Conduct post-incident reviews and integrate lessons learned into detections, procedures, and training.

• Act as the primary client contact for SOC delivery, escalations, and incident communications.

• Lead regular service reviews that cover alert volume, notable incidents, trends, and areas for improvement.

• Assist with client onboarding by defining log sources, tools, escalation paths, and response responsibilities.

• Address client concerns and manage escalations.

• Report on SOC performance, staffing, and risk to Workstreet leadership.

• Collaborate with GRC engineers and virtual Chief Information Security Officers (vCISOs) to meet client compliance obligations.

• Identify enhancements to tools, automation, and processes, and create business cases for implementation.

⛳️ Requirements

• Minimum of 7 years of experience in security operations.

• At least 3 years of experience managing a SOC team or a similar security operations function.

• Proven experience in running a 24x7 SOC operation.

• Experience leading teams of 10 or more analysts, including hiring, performance management, and scheduling.

• In-depth knowledge of EDR, firewall, IPS, WAF, and SIEM platforms.

• Ability to review investigations and recognize overlooked issues.

• Experience managing client relationships and articulating incidents, trends, and SLA performance to both technical and executive audiences.

• Capacity to make informed decisions under pressure and maintain composure during escalations.

• Strong written and verbal communication skills.

• Flexibility to work varied hours as needed for coverage, escalations, or shift transitions.

• Possession of active security or leadership certifications such as CISSP, CISM, GCIH, GCIA, or equivalent.

• Previous experience in a Managed Security Service Provider (MSSP) supporting multiple client environments concurrently.

• Hands-on experience with the administration, configuration, maintenance, and tuning of EDR, SIEM, firewall, IPS, or WAF platforms.

• Familiarity with automation tools, including Python, PowerShell, or SOAR playbook development.

• Knowledge of compliance frameworks such as SOC 2, ISO 27001, or HIPAA.

• Experience creating SOC metrics, dashboards, and reports for clients and leadership.

• Exceptional written and verbal communication skills in English.

• Reliable high-speed internet connection and a professional home office setup.

• Availability to work from 8:00 AM to 5:00 PM U.S. Eastern Time.

• Willingness to travel locally for occasional onsite meetings, team gatherings, or business activities.

• Required to participate in live video interviews with the camera on and verify identity during recruitment and onboarding.

• Employment is contingent upon identity verification and background screening, where permissible by law.

• Must have authorization to work in the U.S. without visa sponsorship now or in the future.

🏝️ Benefits

• Opportunities for career development through mentorship and training.

• Reimbursement for approved training and certification courses relevant to the current position.

• Competitive base salary.

• Regular performance reviews tied to merit-based evaluations.

• Possibility for bonuses.

• Ample opportunities for career progression.

• A remote-first culture with the flexibility to work from anywhere while collaborating with a global team.