SOC Manager

This is a fully remote position, open to applicants in Colorado, +4 more states.

📋 Description

• Design the SOC strategy and roadmap, outlining threat intelligence operations, detection frameworks, and metrics for defensive maturity.

• Develop and refine detection logic across cloud infrastructures, identity layers, and endpoints, filtering out noise to enhance incident response speed.

• Lead incident management, overseeing containment and recovery efforts while advocating for engineering improvements through thorough post-mortems.

• Manage the defensive stack—SIEM, EDR, and automated playbooks—ensuring engineering executes efficient, high-fidelity operations at scale.

• Create proactive threat hunting initiatives, integrating external intelligence to address emerging threats prior to their impact on mission-critical systems.

• Align security controls with engineering and product teams, infusing robust automated defenses into platform architecture.

• Guide and expand a high-performing security operations team, fostering a culture centered on accountability and technical excellence.

• Enhance vendor and MDR relationships, ensuring third-party collaborations meet the technical demands of the mission.

• Convert technical risks and potential impacts into clear guidance for engineering, product, and IT leadership.

⛳️ Requirements

• Over 8 years of experience in cyber operations, incident response, and threat intelligence.

• At least 3 years of experience leading high-agency security operations teams.

• Profound technical expertise in SIEM architecture, EDR stack deployment, and high-fidelity incident response frameworks.

• Proficient in AWS, Kubernetes security, containerized workload protection, and logging pipeline engineering.

• Proven experience in engineering detection logic and automated playbooks that enhance defensive operations and minimize alert noise.

• Capability to mentor technical talent and steer complex security initiatives through uncertainty in fast-paced startup settings.

• Strong communication skills to translate technical risks and complex scenarios into actionable recommendations for leadership.

• Knowledge of navigating FedRAMP, DoD SRG, and CMMC compliance in regulated government and defense sectors.

• Practical scripting and automation skills using Python, Terraform, and SOAR playbooks.

• Candidates must reside in one of the designated hiring locations: DC/Maryland/Virginia; Raleigh/Durham/Chapel Hill, NC; Denver/Colorado Springs, CO; or Dallas/Fort Worth, TX.

• U.S. citizenship is required in the application process.

🏝️ Benefits

• Potential eligibility for equity awards.

• Discretionary bonuses.

• Competitive salary.

• 100% employer-covered medical, dental, and vision plans for you and your dependents.

• 401(k) plan with a 3% company contribution.

• Comprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more.

• Equity incentive plan.

• Technology and home office stipend for new hires.

• Annual stipend for professional development.

• Flexible paid time off, in addition to all federal holidays.

• Generous parental leave policies.

• Flexible remote working options.

• Employee referral bonus program.