Security Operations Center Manager

View full description

Requirements:

• Minimum of 5 years of experience in a security operations or incident response role, with at least 2 years in a leadership or management position.
• You have an engineering background building solutions to solve security problems
• Substantial experience with building and implementing detection rules, use cases, and automation workflows.
• Proficiency in scripting and automation languages such as Python, PowerShell, or similar.
• Strong communication and interpersonal skills, with the ability to effectively lead and motivate a team.
• Strong knowledge of security technologies, including SIEM, IDS/IPS, firewalls, endpoint protection, threat intelligence platforms and automation technologies.
• Experience working for a SaaS company within AWS or Azure.

Responsibilities:

• Lead and manage the SOC team, including security engineers and analysts, fostering a collaborative and innovative environment.
• Oversee the design, deployment, and maintenance of SOC tools and technologies, ensuring they are optimized for performance and scalability.
• Develop and implement strategies for building new detection rules, use cases, and automation workflows to enhance threat detection and response capabilities.
• Coordinate and lead incident response efforts, ensuring timely and effective resolution of security incidents.
• Collaborate with other departments and stakeholders to align SOC initiatives with business objectives and ensure seamless integration of security processes.
• Set and guide the team towards ever evolving capabilities with a clear vision for the long term of the SOC.
• Measure and report the maturity and success of the SOC through metrics and analytical assessment.