SOC Supervisor

This is a fully remote position, open to applicants in United States.

📋 Description

• Supervise daily operations of the SOC and ensure the health of the alert and ticket queue.

• Distribute workloads evenly among SOC team members.

• Take on the role of Incident Commander during critical or high-impact security events.

• Manage communications with customers, internal IT teams, and executive stakeholders during significant incidents.

• Meet SLAs for triage, response, escalation, and resolution.

• Eliminate technical, operational, and cross-functional obstacles.

• Function as the highest point for operational escalation.

• Review handoff logs to guarantee continuity across shifts.

• Lead, mentor, and develop SOC personnel.

• Hold regular one-on-one meetings focused on performance and career growth.

• Organize schedules, coverage plans, on-call rotations, and time-off requests.

• Create training plans and assist in analyst skill enhancement.

• Perform QA reviews and make sure documentation is ready for audits.

• Enforce established playbooks, SOPs, and standardized workflows.

• Examine and authorize updates to SOC processes and response procedures.

• Evaluate SOC metrics and implement improvements to workflows.

• Promote enhancements in tooling, automation, and detection tuning.

• Collaborate with Detection Engineering, Threat Intelligence, IT, and other teams.

• Produce and present KPI and performance reports to leadership.

• Identify risks in service delivery and lead root cause analysis and corrective measures.

• Assist in evolving the SOC from a reactive unit to a proactive security operation.

⛳️ Requirements

• Strong leadership and team management skills within a SOC, NOC, or security operations setting.

• Experience in leading major incident responses and fulfilling the role of incident commander.

• Profound knowledge of SOC workflows, escalation paths, case management, and alert triage operations.

• Ability to manage queue health, prioritize competing operational needs, and uphold SLA performance.

• Excellent communication skills with technical teams, customers, and executive stakeholders.

• Experience in QA reviews, documentation standards, and audit-ready case management.

• Ability to leverage metrics and reporting to inform operational decisions and foster continuous improvement.

• Familiarity with playbook development, SOP governance, and process standardization.

• Knowledge of detection tuning, SOAR/automation options, and operational tooling upgrades.

• Strong coaching, mentoring, and performance management skills.

• Ability to remain calm and decisive in high-pressure situations.

• Excellent organizational skills and capability to balance tactical response with strategic initiatives.

• Over 5 years of experience in Security Operations, Incident Response, or Cybersecurity Operations.

• At least 2 years of experience in a leadership, supervisory, or team lead role within a SOC or similar environment.

• Experience managing analysts or engineers of various seniority levels.

• Proven track record overseeing security incidents, escalations, and operational workflows in a 24x7 or shift-based environment.

• Familiarity with SOC tools such as SIEM, SOAR, EDR/XDR, ticketing systems, and case management platforms.

• Strong understanding of incident response processes, threat detection, escalation management, and security operations best practices.

• Experience with KPI development, SLA tracking, and operational performance reporting.

• Familiarity with audit, compliance, and documentation requirements pertinent to security operations.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field is preferred.

• Industry certifications like Security+, CySA+, GCIH, GCIA, CISSP, or equivalent are preferred.

• Full-time availability, Monday–Friday, 8am–5pm EST.

• Employment eligibility in the United States, verified through E-Verify.

🏝️ Benefits

• Competitive salary.

• Health Insurance (medical, vision, dental), with 80% coverage for employee-only plans and 75% coverage for employee-spouse, employee-kids, and employee-family plans.

• Flexible Spending Account (FSA).

• Health Savings Account (HSA).

• Employee Assistance Program (EAP).

• Retirement Plan (401(k)) with company matching.

• Commuter Benefits.

• Short-Term Disability Insurance fully covered by the company.

• Long-Term Disability Insurance fully covered by the company.

• Life and AD&D Insurance, with optional Supplemental Life Insurance.

• Paid Time Off, including Paid Parental Leave.

• 10 Holidays.

• 2 Floating Holidays.

• Occasional travel for CTS Cybersecurity and team-building events is anticipated (3-4 times a year).