SOC Manager

Position Details

• Job Title: SOC Manager

• Work Mode: Remote

• Employment Type: Contractual

Role Overview

The SOC Manager will lead and evolve the organization’s Security Operations Center to ensure proactive, real-time detection, containment, and mitigation of cybersecurity threats.

This role is responsible for overseeing daily SOC operations, driving continuous improvement in incident response and monitoring capabilities, and aligning security initiatives with business objectives. The SOC Manager will lead a team of Tier 1–3 analysts and engineers, focusing on incident prevention through threat hunting, automation, and process optimization while ensuring strong post-incident analysis and corrective actions.

Primary Responsibilities

• Oversee daily SOC operations, ensuring timely detection, triage, and response to security incidents

• Manage, mentor, and develop Tier 1, Tier 2, and Tier 3 SOC analysts

• Coordinate incident response efforts across internal teams (IT, Risk, Legal, etc.) and external partners (MSSPs, threat intelligence providers)

• Lead post-incident reviews, root cause analysis, and implement long-term corrective actions

• Continuously enhance SOC processes including:

  • Playbooks

  • Response procedures

  • Threat hunting practices

• Ensure SLA adherence and severity-based incident management

• Develop meaningful SOC operational metrics and reporting

Minimum Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field

• 5+ years of cybersecurity experience

• 2+ years in a SOC leadership or management role

• Hands-on experience implementing cybersecurity frameworks:

  • MITRE ATT&CK

  • NIST

  • CIS Controls

• Strong experience in:

  • Incident response methodologies

  • Threat intelligence practices

• In-depth knowledge of security operations tools:

  • SIEM

  • EDR

  • IDS/IPS

  • Malware analysis tools

  • Vulnerability management platforms

• Strong expertise in cloud security operations and monitoring across:

  • AWS

  • Azure

  • Google Cloud Platform

Strongly Preferred Skills

• Proven ability to drive incidents to closure based on SLA and severity

• Experience in:

  • Threat hunting

  • Digital forensics

  • Malware analysis

• Experience working with Managed Security Service Providers (MSSPs)

• Knowledge of advanced persistent threats (APTs) and modern attack techniques

• Experience with security automation (SOAR) and orchestration

• Scripting proficiency (Python, PowerShell, etc.)

• Industry certifications such as:

  • CISSP

  • CISM

  • CEH

Preferred Qualifications

• Familiarity with DevSecOps practices and CI/CD security monitoring

• Experience in containerized environments:

  • Docker

  • Kubernetes

• Proficiency in using APIs for automation

• Experience with HIPAA compliance and health-tech systems such as:

  • Electronic Health Records (EHR)

  • Clinical data systems