- Company Name
- Calian Group
- Job Title
- Manager, Security Operations Center (SOC)
- Job Description
-
**Job Title:**
Manager, Security Operations Center (SOC)
**Role Summary:**
Lead a 24/7 SOC team delivering managed security services, driving operational excellence, incident response, and continuous improvement while maintaining strong customer relationships and service level commitments.
**Expactations:**
Deliver measurable improvements in MTTD, MTTR, alert quality, and overall SOC efficiency; lead and develop analysts to meet SLA/OLA targets; proactively manage MSSP relationships and customer escalations; provide executive‑level reporting and represent the organization at industry forums.
**Key Responsibilities:**
- Oversee day‑to‑day SOC operations, including 24/7 monitoring and MSSP collaboration.
- Develop, maintain, and refine SOC playbooks, runbooks, SOPs, triage procedures, and knowledge base.
- Manage SLAs, KPIs, and OLAs (MTTD, MTTR, alert quality) and conduct quality assurance reviews.
- Supervise incident investigations, root‑cause analysis, and post‑mortem reporting.
- Champion process improvement initiatives to enhance scalability, efficiency, and customer value.
- Allocate resources, prioritize workloads, and schedule analysts in line with SOWs.
- Lead departmental and customer‑facing meetings; provide clear, concise briefings to senior leadership.
- Foster strong customer relationships, manage escalations, and act as trusted partnership advisor.
- Coach, mentor, and perform performance management for SOC analysts, implementing structured feedback and QA assessments.
- Support new service launches, RFP/RFQ responses, customer onboarding, and service improvements.
- Present executive‑level reports and performance metrics to stakeholders.
- Represent the organization at industry events and contribute to thought‑leadership initiatives.
**Required Skills:**
- Leadership & team development in cybersecurity or SOC environments.
- Technical expertise in SIEM, SOAR, EDR/XDR, IDS/IPS, vulnerability management, and cloud security (Azure/GCP).
- Knowledge of MITRE ATT&CK framework, penetration testing, and incident response methodologies.
- Proficiency with ELK Stack, Windows and *nix systems, log analysis, and scripting/programming (Python, Bash, PowerShell).
- Strong analytical, problem‑solving, and communication skills; ability to prepare executive briefings.
- Familiarity with AI tools and QA oversight.
- Experience managing on‑call or escalation support in a hybrid work model.
**Required Education & Certifications:**
- Bachelor’s degree in Computer Science, Information Security, Engineering, Information Systems, or equivalent.
- 7+ years of cybersecurity experience in a SOC, MSSP, or client‑focused environment; 2+ years in project/initiative leadership.
- Security certifications preferred: GIAC (e.g., GCIH), EC-Council (CEH), CompTIA (Security+), CISSP, CISM.