Manager, Security Operations Center
Manages a 24x7 Security Operations Center for a security services provider, leading 10+ SOC analysts across rotating shifts that monitor client environments. A working leadership role: builds schedules, reviews investigations, owns client escalations, and stays hands-on with EDR, SIEM, IPS, WAF, and firewall tooling.
- Compensation
- Not disclosed
- Location
- Remote (United States)
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- 7+ years of security operations experience, including 3+ years managing a SOC team or comparable function
- Has run a 24x7 SOC operation, keeping coverage, quality, and morale steady across shifts
- Experience leading teams of 10 or more analysts, including hiring, performance management, and scheduling
- Strong working knowledge of EDR, firewall, IPS, WAF, and SIEM platforms with hands-on depth to review investigations
- Comfortable owning client relationships and explaining incidents, trends, and SLA performance to technical and executive audiences
- Makes sound decisions under pressure and stays composed during active escalations
- Writes and speaks clearly
- Willing to work flexible hours to support coverage, escalations, or shift transitions
- Excellent written and verbal English communication skills
- Reliable high-speed internet connection and a professional home office environment
- Commitment to a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time (ET)
- Willingness and ability to travel locally for occasional onsite meetings and team gatherings
- Authorized to work in the U.S. without visa sponsorship now or in the future
Nice to have
- Active security or leadership certifications such as CISSP, CISM, GCIH, GCIA, or equivalent
- Prior MSSP experience supporting multiple client environments at once
- Hands-on administration of security toolsets including configuring, maintaining, and tuning EDR, SIEM, firewall, IPS, or WAF platforms
- Experience with automation such as scripting (Python, PowerShell) or SOAR playbook development
- Familiarity with compliance frameworks such as SOC 2, ISO 27001, or HIPAA and audit readiness
- Experience building SOC metrics, dashboards, and reporting for clients and leadership
Full description
Get to know the Security Services Team Team
We are the team our clients trust to be their eyes and ears around the clock, watching over their environments even when their own teams are offline. Our MDR function spans real-time monitoring and alert triage, threat detection and investigation, and incident analysis and response guidance, using the EDR, SIEM, IPS, WAF, and firewall platforms deployed across our client base to catch what automated rules miss and help clients stop incidents before they become breaches.
We don't just close tickets. Our analysts tune detection logic, document what they see, and escalate with the context client stakeholders need to act fast. If you want to build deep, hands-on detection and investigation experience across a wide range of client environments, and be part of a team that backs each other up on every shift, you'll be in good company here.
The Opportunity
Workstreet is seeking a Security Operations Center (SOC) Manager to join our Security Services team. You will own the day-to-day operation of a 24x7 SOC that monitors client environments, and you will manage a team of 10 or more SOC analysts across rotating shifts. The SOC investigates alerts, delivers findings and remediation guidance, and escalates to client stakeholders, who carry out the actual response in their own environments.
This is a working leadership role. You will build the schedule, set the quality bar for investigations, coach analysts, and stay close enough to the tooling (EDR, firewall, IPS, WAF, and SIEM) to judge detection quality yourself. You will also be a visible point of contact for clients on service performance and escalations. The successful candidate will take ownership of shift coverage, team performance, and client-facing SOC delivery within their first 60 days.
What you'll do
Team Leadership
- Lead, coach, and develop a team of 10 or more SOC analysts, with regular one-on-ones, clear goals, and honest performance feedback.
- Build and maintain the 24x7 shift schedule so every shift has the right coverage and skill mix, including nights, weekends, and holidays.
- Recruit, interview, and onboard new analysts, and run a training program that gets them investigating independently quickly.
- Set career paths and development plans for analysts, and support certification and training goals.
- Manage burnout and retention risks that come with round-the-clock operations.
SOC Operations
- Own SOC performance against client SLAs, tracking metrics such as time to acknowledge, time to investigate, escalation quality, and false positive rate.
- Review investigations and escalations for accuracy, completeness, and clarity before they reach clients, and coach analysts on gaps.