Senior Cyber Security Manager – CSIRT, SOC

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee daily monitoring at the SOC/ARC, including alert triage, investigations, and incident response.

• Supervise analysts, shift leads, and incident handlers across all tiers.

• Define the responsibilities and escalation criteria for Tier 1, 2, and 3.

• Create sustainable 24x7 coverage models utilizing follow-the-sun, dedicated shifts, or hybrid on-call rotations.

• Ensure adequate staffing and service coverage through effective workforce planning.

• Develop and enhance incident response procedures, runbooks, and playbooks.

• Manage the complete cyber incident response process and coordinate countermeasures and mitigating controls.

• Act as the primary escalation point for intricate investigations and significant incidents.

• Coordinate high-severity incidents with IT, Legal, Communications/PR, and executive leadership.

• Conduct post-incident reviews, tabletop exercises, cyber simulations, and readiness drills.

• Create detection engineering and proactive threat-hunting initiatives.

• Optimize SIEM, EDR, and other security technologies to enhance effectiveness and minimize false positives.

• Align detection use cases with MITRE ATT&CK, threat intelligence, emerging threats, and organizational risks.

• Establish and report on MTTD, MTTR, MTTC, detection coverage, alert fidelity, incident volume, severity trends, and analyst productivity.

• Develop SOC/ARC KPIs, KRIs, and executive dashboards.

• Improve security tools, processes, and SIEM/SOAR platforms.

• Implement AI/ML-supported capabilities for triage, correlation, and investigation.

• Ensure alignment of security operations with regulatory requirements and frameworks, including NIST CSF, NIST SP 800-61, MITRE ATT&CK, CIS Controls, ISO 27001, PCI-DSS, SOX, and HIPAA.

• Assist in audits, assessments, and evidence collection.

• Manage the SOC operating budget encompassing tools, staffing, and managed services.

• Supervise MSSPs, MDR providers, incident response retainers, and security technology partnerships.

• Define and enforce vendor and contract SLAs.

• Recruit, coach, mentor, and nurture security operations personnel.

• Establish career pathways, training programs, skills assessments, and succession plans.

• Direct cybersecurity strategies and significant projects impacting multiple areas of the organization.

• Set operational objectives, policies, procedures, and work plans.

• Collaborate with frontline and senior management across various functions, departments, and customers.

• Navigate sensitive and complex situations with persuasion and sound judgment.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.

• A Master’s degree is preferred.

• 10 years of progressive, hands-on cybersecurity experience.

• 5 years of leadership experience overseeing Security Operations, Incident Response, Cyber Defense, and SOC teams.

• Demonstrated success in building and enhancing SOC capabilities, incident response programs, and detection engineering functions.

• Experience in developing cybersecurity operational metrics, executive reporting, and performance dashboards, including MTTD, MTTR, KPIs, and KRIs.

• Proven track record in implementing SIEM, EDR, SOAR, and automated or AI-assisted response capabilities.

• Experience managing 24x7 staffing models, budgets, and third-party security vendors or MSSPs.

• Preferred certifications include CISSP, CISM, GIAC GCIH, GIAC GCIA, and GMON.

• Cloud security certifications such as Azure Security Engineer Associate or Microsoft Cybersecurity Architect Expert are preferred.

• Must understand and comply with OnTrac’s Acceptable Use policy and security guidelines.

🏝️ Benefits

• Medical, dental, and vision insurance.

• Life insurance and short- and long-term disability coverage.

• 401(k) retirement savings plan with company matching.

• Flexible vacation in states excluding CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours in the first year, increasing to 160 hours based on tenure.

• Two (2) floating holidays each year.

• Paid sick leave.

• Six (6) paid company holidays.

• Two (2) weeks paid pregnancy disability leave.

• Four (4) weeks paid parental bonding leave.

• Additional wellness and employee assistance programs.

• Bonus, commission, or other incentive compensation may be available, with a bonus target of up to 20%.