MDR Manager

This is a fully remote position, open to applicants in Florida.

📋 Description

• Manage 24/7 shift coverage, escalation paths, and tiering while participating in an on-call rotation.

• Take ownership of response SLAs and report SOC KPIs to executive leadership.

• Perform quality assurance on resolved alerts and incidents, minimize false positives, and maintain runbooks, playbooks, and SOC standards.

• Lead, coach, and mentor MDR Analysts through one-on-one sessions, feedback, onboarding, and T1-to-T3 training.

• Facilitate tabletop exercises and conduct post-incident reviews.

• Act as the technical lead and final escalation point for Tier 3 incidents, guiding complex investigations through their full lifecycle while ensuring defensible documentation.

• Correlate alerts from EDR, ITDR, and email security systems.

• Execute proactive threat hunts in alignment with MITRE ATT&CK.

• Utilize Guardz AI agents, Google BigQuery, SQL, and KQL to triage and investigate high-volume logs.

• Collaborate with MSPs on significant incidents and posture reviews.

• Contribute incident findings to enhance detection capabilities in partnership with product, threat research, and engineering teams.

⛳️ Requirements

• Over 5 years of experience in SOC, MDR, or Incident Response managing complex attacks, including at least 2 years in a Team Lead, Shift Lead, or senior role.

• Proficient hands-on experience with EDR solutions, including SentinelOne, CrowdStrike, and Defender for Endpoint.

• Practical experience with ITDR across Microsoft 365 and Google Workspace.

• Familiarity with tools such as Google BigQuery, Snowflake, Splunk, Elastic, or similar platforms.

• Proficiency in SQL, KQL, SPL, or other equivalent query languages.

• Knowledge of MITRE ATT&CK-aligned detection and proactive threat hunting methodologies.

• Experience with AI-driven triage engines, automated playbooks, or agentic SecOps platforms.

• Strong communication skills to effectively engage with both technical and non-technical audiences.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related hands-on experience.

• Preferred certifications include CompTIA Security+, CompTIA CySA+, Microsoft SC-200, GIAC GCIH, GCIA, GCFA, or CISSP.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Flexible work hours and remote work options.

• Opportunities for professional development and certifications.

• Collaborative and innovative work environment.