SOC Manager

Lead and manage Security Operations Center functions, including security monitoring, alert triage, incident investigation, response activities, and operational readiness. Provide direct supervision, performance management, coaching, and career development for SOC personnel while overseeing detection and response capabilities utilizing modern security platforms. Serve as the primary escalation point for high-severity incidents, ensuring timely containment, eradication, recovery, and communication. Develop and maintain SOC operational procedures, standards, runbooks, and security monitoring requirements. Provide regular operational and executive-level reporting on security incidents, threat trends, SOC performance, and program maturity. Lead post-incident reviews, root cause analysis, and lessons learned to continuously improve detection and response capabilities. Lead and participate in detection engineering efforts to improve alert fidelity, reduce false positives, and expand coverage across the threat landscape. Expand and oversee SOC automation initiatives, including SOAR workflows and security playbooks, to improve MTTD and MTTR while reducing manual effort. Partner with threat intelligence and vulnerability management teams to enhance detection content, improve threat visibility, and strengthen detection capabilities. Manage staffing, workload distribution, shift coverage, and on-call rotations to maintain operational effectiveness.