SOC Manager

About you

Do you have a passion for enabling business with secure, top-tier technology? Do you thrive in a fast-paced and ever-evolving environment? Then we have the next career move for you!

Who are we?

We are ARCO, a Family of Construction Companies. The Services Manager, Cybersecurity Operations leads ARCO’s day-to-day security monitoring, detection, and incident response activities.

What we can offer you

• Industry-leading performance-based bonus program
• 100% company funded retirement contributions
• Traditional and Roth 401k
• Tuition reimbursement for associates
• Scholarship for associates’ children up to $28,000 per child
• 1-month paid sabbatical after every five years of employment, plus $5,000 for travel
• 1-week paid volunteer leave each year
• 100% charitable match
• Medical, dental, and vision insurance coverage
• 100% paid 12-week maternity leave

At ARCO

• First core value: Treat people fairly and do the right thing
• Committed to building and sustaining a culture that supports diversity and inclusion
• Equal opportunity employer

A Day in the Life

• Lead, mentor, and develop a team of Cybersecurity Analysts responsible for monitoring, triage, and incident response.
• Oversee daily SOC operations and ensure timely, effective handling of security alerts and requests.
• Automate repetitive tasks and implement process improvements to enhance efficiency.
• Maintain and update runbooks, SOPs, escalation workflows, and operational playbooks.
• Lead all security incident investigations, containment, and remediation activities.
• Conduct regular incident response exercises and postmortems, identifying root causes and tracking improvements.
• Stay current on emerging threats and assess ARCO’s readiness to defend against them.
• Manage and optimize security tooling (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, threat intel platforms, etc.).
• Oversee vulnerability scanning, prioritization, and remediation with Infrastructure partners.
• Support patching, hardening, and secure configuration efforts across systems and networks.
• Guide engineering, deployment, and documentation of security tools.
• Support audits, evidence requests, and compliance requirements (NIST 800-171, CMMC, NIST CSF) in partnership with GRC.
• Develop metrics and dashboards that measure organizational risk and SOC performance.
• Communicate security risks and incident updates to leadership in clear business terms.
• Ensure required security awareness training and phishing simulations are delivered effectively.
• Participate in change management, project reviews, and technology planning discussions.
• Collaborate with Technology teams to identify security gaps and strengthen overall posture.

Necessary Qualifications

• 7-10 years of cybersecurity operations/engineering experience, including monitoring and incident response.
• Experience leading people, developing talent, and managing high-performing teams.
• Hands-on experience with core security technologies (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, vulnerability management, threat intel, SOAR).
• Strong communication skills with the ability to translate technical issues into business risk.
• Proven ability to drive measurable improvements in SOC performance.
• Strong organizational skills with the ability to prioritize and delegate.
• Experience with Azure or AWS environments.
• Familiarity with industry frameworks (NIST 800-171, CMMC, NIST CSF).
• Preferred certifications: CISSP, CISM, SANS/GIAC, CySA+, or similar.