Senior Cyber Security Manager – CSIRT, SOC

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee daily SOC/ARC monitoring, alert triage, investigations, and incident response.

• Supervise analysts, shift leads, and incident handlers across all levels.

• Establish responsibilities and escalation criteria for Tier 1/2/3 operations.

• Create sustainable 24x7 coverage through follow-the-sun, dedicated shifts, or hybrid on-call rotations.

• Ensure adequate staffing and service coverage while formulating workforce plans.

• Develop and enhance incident response procedures, runbooks, and playbooks.

• Manage the end-to-end cyber incident response and coordinate countermeasures and mitigating controls.

• Act as the primary escalation point for complex investigations and significant incidents.

• Facilitate high-severity incident response across IT, Legal, Communications/PR, and executive leadership.

• Conduct post-incident reviews, tabletop exercises, cyber simulations, and readiness drills.

• Monitor corrective, preventive, and remediation actions until completion.

• Create detection engineering and proactive threat-hunting initiatives.

• Optimize SIEM, EDR, and other security technologies to enhance effectiveness and minimize false positives.

• Align detection use cases with MITRE ATT&CK, threat intelligence, emerging threats, and organizational risks.

• Establish and report metrics such as MTTD, MTTR, MTTC, detection coverage, alert fidelity, incident volume, severity trends, and analyst productivity.

• Develop SOC/ARC KPIs and KRIs and create executive dashboards.

• Enhance security tools, processes, and SIEM/SOAR platforms.

• Implement AI/ML-supported triage, correlation, and investigation capabilities.

• Define the boundary between automated actions and human judgment.

• Ensure security operations align with relevant regulatory requirements and frameworks.

• Assist with audits, assessments, and evidence-collection efforts.

• Manage the SOC operating budget encompassing tools, staffing, and managed services.

• Supervise MSSPs, MDR providers, incident response retainers, and security technology partners.

• Define and uphold vendor and contract SLAs.

• Recruit, coach, mentor, and develop personnel in security operations.

• Establish career paths, training programs, skills assessments, and succession plans.

• Lead the strategy and execution of significant cybersecurity projects.

• Set operational objectives, policies, procedures, and work plans.

• Delegate responsibilities efficiently across the team.

• Collaborate with frontline and senior management across various functions, departments, and clients.

• Navigate sensitive and complex situations using persuasion and sound judgment.

⛳️ Requirements

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field; Master's degree is preferred.

• 10 years of progressive, hands-on cybersecurity experience.

• 5 years of leadership experience in managing Security Operations, Incident Response, Cyber Defense, and SOC teams.

• Proven experience in building and enhancing SOC capabilities, incident response programs, and detection engineering functions.

• Experience in developing cybersecurity operational metrics, executive reporting, and performance dashboards, including MTTD, MTTR, KPIs, and KRIs.

• Successful track record in implementing SIEM, EDR, SOAR, and automated or AI-assisted response capabilities.

• Experience in managing 24x7 staffing models, budgets, and third-party security vendors or MSSPs.

• Preferred certifications include CISSP, CISM, GIAC GCIH, GIAC GCIA, and GMON.

• Cloud security certifications such as Azure Security Engineer, Associate or Microsoft Cybersecurity Architect Expert are preferred.

• Responsible for understanding and adhering to OnTrac’s Acceptable Use policy and security guidelines.

🏝️ Benefits

• Medical, dental, and vision insurance.

• Life and short- and long-term disability coverage.

• 401(k) retirement savings plan with company match.

• Flexible vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours in the first year of employment and tenure-based increases up to 160 hours.

• Two (2) floating holidays per year.

• Paid sick leave.

• Six (6) paid company holidays.

• Two (2) weeks paid pregnancy disability leave.

• Four (4) weeks paid parental bonding leave.

• Additional wellness and employee assistance programs.

• Up to a 20% Bonus Target.