SOC Manager

We are looking for a SOC Manager to lead and manage our Security Operations Center (SOC). The role involves overseeing 24/7 operations, ensuring SLA compliance, and driving continuous process improvements.

Key Responsibilities:

• Manage SOC operations: alert triage, incident response, root-cause analysis
• Define and enforce SLAs, workflows, SOPs, and playbooks
• Lead, mentor, and schedule a multi-level SOC team (L1L3)
• Oversee tool stack: SIEM, SOAR, EDR, threat intelligence
• Drive detection engineering and tune use-cases
• Integrate threat intelligence feeds and automate correlations
• Lead threat hunting and purple-team exercises
• Act as the point of contact for clients: incident escalation, reporting, QBRs
• Own incident war rooms for critical (P1/P2) incidents
• Support compliance (ISO 27001, PCI DSS, etc.) and audit readiness
• Maintain SOC metrics and dashboards (MTTR, MTTD, alert volume)
• Drive automation (SOAR, scripting) and innovation (ML/AI, cyber range)
• Own SOC budget, resource planning, and multi-tenant operations
• Collaborate with sales/pre-sales for RFPs, service catalogues, and pricing
• Manage vendor relationships (SIEM, SOAR, TI vendors)
• Develop and maintain knowledge base, runbooks, and training programs
• Ensure business continuity for SOC operations (DR / BCP planning)

Skills & Qualifications:

• 8+ years in SOC or security operations roles
• Strong leadership and team-management skills
• Deep understanding of SIEM, SOAR, EDR, and threat intel platforms
• Experience with compliance frameworks (ISO 27001, PCI DSS, etc.)
• Data-driven mindset: metrics, reporting, dashboards
• Strong communication skills (client-facing and technical)
• Proven experience in automation and process improvement
• Budgeting and resource planning expertise
• Relevant security certifications (CISSP, CISM, etc.) are a plus