Senior Manager, SOC Operations

POSITION SUMMARY

We are seeking an accomplished Senior Manager of SOC Operations to oversee the Global Security Operations Centers across multiple locations, responsible for monitoring, detecting, and responding to threats impacting nearly three million endpoints within a multi-tenant environment. This leadership position requires extensive operational experience in large-scale settings, ideally within MSP or MSSP contexts, or similar managed multi-client environments. The Senior Manager will operate within a next-generation, AI-powered SOC, where they will lead and manage the response team, leveraging advanced artificial intelligence technologies to enhance detection, response, and overall security operations.

The successful candidate will be responsible for advancing operational excellence through the training and development of analysts, automation of routine tasks, proactive threat hunting, identifying and implementing improvements in tools and processes, and maintaining robust customer engagement to ensure exceptional service delivery and outcomes. This role is instrumental in scaling SOC capabilities while upholding precise and swift response times and driving ongoing enhancements in a rapidly evolving threat landscape.

Qualified candidates who demonstrate strategic vision in building high-performing teams, optimizing operations through automation, and delivering superior customer outcomes in managed environments are encouraged to apply.

KEY RESPONSIBILITIES

• Response Team Operations: Oversee day-to-day operations of a multilocation, global 24/7 SOC, monitoring ~3 million endpoints, including post AI investigation human response, incident response, escalation processes, and performance metrics/KPIs across shifts and global teams.
• Team Development & Training: Recruit, mentor, and train SOC analysts and team leads, develop career progression paths, conduct regular skills assessments, and deliver ongoing training on tools and best practices.
• Process Automation: Identify and implement automation opportunities (e.g., via scripting, SOAR platforms, or custom playbooks) to reduce manual workload, improve efficiency, and minimize response times.
• Threat Hunting & Proactive Defense: Actively assist with and lead threat hunting initiatives; collaborate with analysts to hunt for advanced persistent threats, refine and optimize detection rules and alerting and continuously tune customer environments.
• Continuous Improvement: Evaluate and recommend enhancements to SOC tools, technologies, processes, and workflows; drive initiatives to mature the SOC and adapt to emerging threats.
• Customer Engagement: Serve as a key point of contact for customer escalations; deliver incident reports, threat briefings, and service reviews; ensure a premium customer experience through proactive communication and alignment with metrics in a multi-client environment.
• Daily Management: Manage shift coverage, compliance reporting, and cross-functional collaboration with engineering, threat intelligence, and security success teams.

REQUIRED QUALIFICATIONS

• Experience: Minimum 10 years of progressive experience managing a SOC (or equivalent leadership role) in a high-volume environment handling thousands of alerts per day.
• MSSP Background (Preferred): Demonstrated experience working in or with Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), or managed multi-client/multi-tenant environments is strongly preferred.
• Technical Expertise: Knowledge of SOC tools and technologies, including SIEM (e.g., Splunk, ELK, Sentinel), EDR/XDR (e.g., CrowdStrike, Sentinel One, Microsoft Defender), SOAR, and threat intelligence platforms. Hands-on experience with large-scale endpoint management and multi-tenant architectures.
• Leadership & Soft Skills: Proven track record leading and developing high-performing analyst teams in 24/7 operations. Strong analytical, problem-solving, and communication skills. Ability to lead from the front and inspire your team to follow you into battle.
• Education & Certifications: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field (or equivalent experience). Preferred certifications include CISSP, CISM, GIAC (e.g., GCIA, GCIH), or equivalent.
• Background in proactive threat hunting, detection engineering, or incident response at scale.

#IND525