Security Operations Center Manager

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Oversee the daily operations of a 24/7 Security Operations Center (SOC) monitoring client environments.

• Guide, mentor, and enhance the skills of a team of 10 or more SOC analysts through individual meetings, goal setting, feedback, career development paths, and training plans.

• Create and manage 24/7 shift schedules, encompassing nights, weekends, and holidays.

• Recruit, interview, onboard, and train new analysts to ensure a robust team.

• Address burnout and retention challenges associated with continuous operations.

• Ensure SOC performance meets client Service Level Agreements (SLAs), including acknowledgment times, investigation durations, escalation quality, and false positive rates.

• Evaluate investigations and escalations for accuracy, completeness, and clarity prior to client delivery.

• Supervise monitoring across EDR, firewall, IPS, WAF, and SIEM platforms while prioritizing detection tuning.

• Maintain SOC runbooks, playbooks, and procedures for shift handoffs.

• Conduct post-incident reviews and integrate lessons learned into detections, processes, and training.

• Act as the primary client contact for SOC service delivery, escalations, and incident communications.

• Facilitate regular client service reviews that address alert volumes, significant incidents, trends, and areas for improvement.

• Collaborate with clients during onboarding to define log sources, tools, escalation procedures, and response responsibilities.

• Manage client concerns and escalations, exercising independent judgment as needed.

• Report on SOC performance, staffing, and risks to Workstreet leadership.

• Collaborate with Governance, Risk, and Compliance (GRC) engineers and virtual Chief Information Security Officers (vCISOs) to assist clients in meeting compliance requirements.

• Identify opportunities for enhancements to tools, automation, and processes, presenting business cases for these improvements.

⛳️ Requirements

• A minimum of 7 years in security operations, including at least 3 years in a managerial role within a SOC or similar security operations function.

• Proven experience in managing a 24/7 SOC operation while ensuring coverage, quality, and team morale across shifts.

• Experience leading teams of 10 or more analysts, overseeing hiring, performance management, and scheduling.

• In-depth knowledge of EDR, firewall, IPS, WAF, and SIEM platforms, with practical experience in reviewing investigations and identifying overlooked issues.

• Comfortable managing client relationships and articulating incidents, trends, and SLA performance to both technical and executive audiences.

• Strong decision-making skills under pressure and the ability to remain composed during active escalations.

• Excellent written and verbal communication skills, with high standards for analyst reports and client interactions.

• Flexibility to work varied hours as needed for coverage, escalations, or shift transitions.

• Current security or leadership certifications such as CISSP, CISM, GCIH, GCIA, or equivalent.

• Previous experience in a Managed Security Service Provider (MSSP) setting, supporting multiple client environments concurrently.

• Hands-on experience administering security toolsets, including configuring, maintaining, and tuning EDR, SIEM, firewall, IPS, or WAF platforms.

• Familiarity with automation technologies such as Python, PowerShell, or development of SOAR playbooks.

• Understanding of compliance frameworks like SOC 2, ISO 27001, or HIPAA, and how SOC activities support audit readiness.

• Experience in developing SOC metrics, dashboards, and reporting for clients and leadership.

• Exceptional written and verbal communication skills in English.

• Reliable high-speed internet connection and a professional home office environment suitable for confidential conversations, incident calls, and seamless collaboration.

• Availability for management coverage across the 24/7 SOC, including escalations beyond standard business hours.

• Willingness and capability to travel locally for occasional onsite meetings, client reviews, team gatherings, or business activities.

• Participation in live video interviews with the camera on and identity verification during recruitment and onboarding processes.

• Successful completion of identity verification and background checks, where permissible by law.

🏝️ Benefits

• Career Development: Clearly defined path with mentorship and training opportunities.

• Role-Related Training: Reimbursement for successful completion of approved training and certification courses that are relevant to your current position.

• Competitive Compensation: An attractive base salary with regular performance evaluations linked to merit-based assessments and bonus opportunities.

• Growth Opportunity: Join an early-stage company with significant potential for career advancement.

• Remote-First Culture: Enjoy the flexibility to work from anywhere while collaborating with a global team.