Salary
💰 $120,000 - $130,000 per year
About the role
- Lead the SOC with a dual focus: delivering operational excellence and ensuring an exceptional customer experience
- Manage and develop a high-performing team of cybersecurity professionals—analysts, detection engineers, threat hunters, and incident responders
- Act as a key customer-facing leader for security operations
- Ensure timely, accurate, and effective threat detection and response services for clients across diverse industries
- Accountable for team performance, client satisfaction, and the retention of managed services clients by building trust, transparency, and consistent communication
- Supervise, mentor, and coach a team of SOC personnel, providing guidance, development plans, and regular performance feedback
- Oversee 24/7 coverage, including shift scheduling, escalations, and resource management
- Communicate effectively with clients during and after security incidents, delivering clear explanations, root cause analyses, and remediation guidance
- Identify customer pain points or operational gaps and proactively work with internal teams to enhance service delivery
- Oversee the identification, investigation, escalation, and resolution of security incidents
- Ensure consistent use of playbooks and runbooks, driving response maturity and measurable improvements in response time and accuracy
- Lead post-incident review sessions (PIRs) with clients and internal teams to document lessons learned and drive preventive actions
- Define, track, and report on KPIs and SLAs to assess team and service effectiveness
- Implement quality assurance processes to evaluate ticket handling, escalation accuracy, and incident response fidelity
- Drive operational improvements through automation, new detection technologies, and runbook enhancement
- Contribute to process improvement with onboarding and offboarding of customer environments, ensuring all tools, detections, and workflows are aligned to SOC standards
- Collaborate with customer to align detection engineering, threat intelligence, and response playbooks to customer-specific needs
Requirements
- 4+ years of SOC experience, including hands-on incident response and threat detection
- 2+ years of experience managing SOC teams in a customer-facing or MSSP setting
- Experience with Microsoft Defender suite and Microsoft Sentinel
- Strong interpersonal, leadership, and customer relationship skills
- Ability to manage multiple client expectations, projects, and priorities in a high-tempo environment
- Strong communication skills for both technical and executive audiences
- Must possess or obtain SC-200 or MS-100 within the first year of employment
- Relevant certifications (e.g., GCIH, GCFE, GSOC, CSA, MS SC-200/SC-100, CEH, OSCP, GPEN)
- Preferred: Bachelor’s degree in Cybersecurity, Computer Science, or a related field
- Preferred: Background in Managed Security Services or consulting