The SOC Manager is responsible for overseeing the operations of a 24x7x365 Security Center and its analysts who monitor security tools, assess threats, and risks involving client infrastructure. In this role, you are responsible for ensuring that all Managed Service deliverables are produced on time and within strict SLA time frame and responding to customers at all times. Acting as the escalation point for the SOC technical team, the SOC Manager also acts as a liaison between the SOC Account Managers and Business operations to facilitate and deliver services to the customers.
Responsibilities
SOC Operations Management – Oversee daily SOC operations, ensuring effective 24/7 security monitoring, alert management, incident detection, and response in line with SLAs and operational standards.
Incident Response & Escalation – Lead the investigation and management of major security incidents, ensuring timely escalation, containment, resolution, root cause analysis, and post-incident reviews.
Team Leadership & Development – Manage and develop SOC personnel, including workforce planning, shift coverage, performance management, coaching, training, and maintaining a high-performing team.
Service Delivery & Customer Management – Ensure quality and timely delivery of SOC services, monitor customer SLAs and KPIs, and act as the key escalation point for critical customer security incidents and operational issues.
Continuous Improvement & Security Enhancement – Drive improvements in SOC processes, security detection capabilities, technologies, automation, threat intelligence, and incident response procedures to strengthen overall cybersecurity effectiveness.
Requirements
Minimum 5-8 years of relevant experience in cybersecurity, SOC operations, security monitoring, incident response, or managed security services, with 3–4 years in a supervisory or managerial role.
Strong knowledge of SIEM, SOAR, EDR/XDR, threat intelligence, vulnerability management, and incident response processes.
Good understanding of security threats, attack techniques, threat hunting, digital forensics, network security, and security operations best practices.
Demonstrated ability to lead a group of analysts, motivate, coach, and manage SOC teams, including shift-based and 24/7 operations.
Strong experience in handling and coordinating high-severity and major cybersecurity incidents, including stakeholder communication and escalation.
