Security Operations Center Manager

This is a fully remote position, open to applicants in India.

📋 Description

• Manage the everyday operations of a 24x7 SOC monitoring client environments.

• Guide, mentor, and develop a team of 10 or more SOC analysts.

• Create and sustain 24x7 shift schedules, encompassing nights, weekends, and holidays.

• Recruit, conduct interviews, and onboard new analysts.

• Implement training programs to empower analysts to conduct independent investigations.

• Define career paths and development plans, while supporting certification and training objectives.

• Address burnout and retention challenges.

• Oversee SOC performance relative to client SLAs and monitor operational metrics.

• Assess investigations and escalations for accuracy, completeness, and clarity.

• Supervise monitoring across EDR, firewall, IPS, WAF, and SIEM platforms.

• Prioritize detection tuning to minimize noise and close coverage gaps.

• Maintain SOC runbooks, playbooks, and shift handoff procedures.

• Conduct post-incident reviews and integrate lessons learned into detections, procedures, and training.

• Act as the primary client contact for SOC delivery, escalations, and incident communications.

• Lead regular client service reviews discussing alert volume, incidents, trends, and improvements.

• Collaborate with clients during onboarding to define log sources, tools, escalation paths, and response responsibilities.

• Report SOC performance, staffing, and risk to Workstreet leadership.

• Work alongside GRC engineers and vCISOs to assist clients in meeting compliance obligations.

• Identify opportunities for enhancing tools, automation, and processes.

• Take responsibility for shift coverage, team performance, and client-facing SOC delivery within the first 60 days.

⛳️ Requirements

• Over 7 years of experience in security operations.

• More than 3 years in managing a SOC team or a similar security operations role.

• Experience in operating a 24x7 SOC environment.

• Proven track record of leading teams of 10 or more analysts, including hiring, performance management, and scheduling.

• Strong practical knowledge of EDR, firewall, IPS, WAF, and SIEM platforms.

• Capability to review investigations and pinpoint overlooked issues.

• Experience managing client relationships and communicating incidents, trends, and SLA performance to both technical and executive audiences.

• Ability to make informed decisions under pressure.

• Excellent written and verbal communication skills.

• Willingness to work flexible hours as necessary for coverage, escalations, or shift transitions.

• Proficient in written and verbal English communication.

• Access to a reliable, high-speed internet connection.

• Professional home office setup conducive to confidential discussions and uninterrupted collaboration.

• Availability for a standard schedule from 8:00 AM to 5:00 PM U.S. Eastern Time.

• Willingness and capacity to travel locally for occasional onsite meetings, team gatherings, or business activities.

• Participation in live video interviews with the camera on.

• Identity verification during the recruitment and onboarding process.

• Successful completion of identity verification and background screening, where permissible by law.

• Active security or leadership certifications such as CISSP, CISM, GCIH, GCIA, or equivalent.

• Previous experience in an MSSP supporting multiple client environments.

• Hands-on experience with the administration, configuration, maintenance, and tuning of EDR, SIEM, firewall, IPS, or WAF platforms.

• Experience with scripting languages like Python or PowerShell, or developing SOAR playbooks.

• Familiarity with compliance frameworks such as SOC 2, ISO 27001, or HIPAA.

• Experience in building SOC metrics, dashboards, and reporting.

🏝️ Benefits

• Well-defined career path with mentorship and training opportunities.

• Reimbursement for successful completion of approved training and certification courses relevant to the current role.

• Competitive base salary.

• Regular performance reviews tied to merit-based evaluations.

• Opportunities for bonuses.

• Significant potential for career advancement.

• Remote-first flexibility to work from anywhere while collaborating with a global team.