Security Operations Center Manager

About this role

Get to know the Security Services Team We are the team our clients trust to be their eyes and ears around the clock, watching over their environments even when their own teams are offline. Our MDR function spans real-time monitoring and alert triage, threat detection and investigation, and incident analysis and response guidance, using the EDR, SIEM, IPS, WAF, and firewall platforms deployed across our client base to catch what automated rules miss and help clients stop incidents before they become breaches.

We don't just close tickets. Our analysts tune detection logic, document what they see, and escalate with the context client stakeholders need to act fast. If you want to build deep, hands-on detection and investigation experience across a wide range of client environments, and be part of a team that backs each other up on every shift, you'll be in good company here. The Opportunity Workstreet is seeking a Security Operations Center (SOC) Manager to join our Security Services team.

You will own the day-to-day operation of a 24x7 SOC that monitors client environments, and you will manage a team of 10 or more SOC analysts across rotating shifts. The SOC investigates alerts, delivers findings and remediation guidance, and escalates to client stakeholders, who carry out the actual response in their own environments. This is a working leadership role. You will build the schedule, set the quality bar for investigations, coach analysts, and stay close enough to the tooling (EDR, firewall, IPS, WAF, and SIEM) to judge detection quality yourself.

You will also be a visible point of contact for clients on service performance and escalations. The successful candidate will take ownership of shift coverage, team performance, and client-facing SOC delivery within their first 60 days. What you'll do Team Leadership ● Lead, coach, and develop a team of 10 or more SOC analysts, with regular one-on-ones, clear goals, and honest performance feedback. ● Build and maintain the 24x7 shift schedule so every shift has the right coverage and skill mix, including nights, weekends, and holidays.

● Recruit, interview, and onboard new analysts, and run a training program that gets them investigating independently quickly. ● Set career paths and development plans for analysts, and support certification and training goals. ● Manage burnout and retention risks that come with round-the-clock operations. SOC Operations ● Own SOC performance against client SLAs, tracking metrics such as time to acknowledge, time to investigate, escalation quality, and false positive rate.