SOC Manager – Security Operations Center Lead

About the role

The Security Operations Center (SOC) Manager leads a 24x7 SOC, ensuring continuous monitoring, threat detection, investigation, and incident response. This senior position serves as the primary escalation point for major security incidents and drives timely resolution while aligning SOC services with business risk priorities.

Key responsibilities

• Oversee daily SOC activities, including monitoring, detection, investigation, and response.
• Act as the main escalation point for high‑severity incidents and manage crisis situations.
• Ensure compliance with incident response procedures, runbooks, and escalation protocols.
• Monitor SOC performance against KPIs and SLAs, driving continuous improvement.
• Serve as the primary interface between SOC teams, clients, and internal leadership, providing clear communication during incidents.
• Lead, coach, and develop SOC analysts and team leads, managing performance and workforce planning.
• Maintain alignment with compliance requirements, regulatory standards, and client expectations.

Required profile

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT or related field.
• 8+ years of cybersecurity experience, including at least 3 years in a SOC leadership or management role.
• Professional certifications such as CISSP, CISM, GCIH, GCIA or equivalent are preferred.
• Experience in Managed Security Services (MSSP) environments and cloud security operations.

Required skills

• Hands‑on experience with SIEM, SOAR, EDR/XDR and Threat Intelligence platforms.
• Proficiency with Microsoft Sentinel, Splunk, QRadar or similar SIEM technologies.
• Knowledge of MITRE ATT&CK, NIST Cybersecurity Framework and ISO 27001.
• Strong background in Security Operations, Incident Response, Threat Detection and Security Monitoring.