SOC Operations Manager

Responsibilities

• Serve as the operational manager for the SOC and is responsible for workforce management, shift scheduling, analyst performance, incident response coordination, and operational reporting.
• Designated point of contact for SOC operations, customer engagement, service delivery issues, and major incident escalations.
• Develop and maintain 24x7 staffing plans, shift schedules, on-call rotations, and surge support capabilities to ensure continuous monitoring and response coverage.
• The role will oversee Tier 1–3 analyst activities, manage incident handling processes, ensure adherence to SLAs and operational metrics, and drive continuous improvement initiatives across SOC operations.
• Cook up with Threat Intelligence, Threat Hunting, Engineering, Vulnerability Management, and Incident Response teams to ensure effective detection, investigation, and remediation of cybersecurity threats.

Qualifications

• 10+ years of cybersecurity experience with at least 5 years supporting Security Operations Centers, Incident Response, or Cyber Defense Operations.
• Demonstrated experience managing SOC operations, including workforce planning, shift management, and analyst supervision.
• Strong understanding of security monitoring, incident response, threat detection, escalation procedures, and cyber defense operations.
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or equivalent security monitoring technologies.
• Proven ability to coordinate and lead response activities during major cybersecurity incidents.
• Bachelor’s degree.
• Possess an active Top Secret clearance.