What are the responsibilities and job description for the SOC Manager position at Inversion6?
Security Operations Manager
The Security Operations Manager is responsible for the leadership and oversight of the 24/7 Security Operations Center (SOC). This role manages a team of cybersecurity analysts, directs incident detection and response activities, and ensures operational effectiveness across all SOC functions. The position requires strategic planning, process optimization, and collaboration with internal teams to maintain a strong security posture and meet organizational objectives.
Key Responsibilities
- Provide leadership and direction for all SOC operations to ensure timely detection, analysis, and response to security incidents.
- Develop, maintain, and enforce SOC processes, playbooks, and standard operating procedures.
- Manage recruitment, training, and performance of SOC personnel to build and sustain a high-performing team.
- Serve as the primary escalation point for critical incidents, ensuring effective containment and remediation.
- Integrate threat intelligence into SOC workflows to enhance prevention and detection capabilities.
- Oversee the use and optimization of SIEM, SOAR, EDR, and related security technologies.
- Monitor and report on SOC performance using key metrics such as MTTD and MTTR.
- Collaborate with IT, compliance, and customer teams to improve security operations.
- Contribute to annual budget planning and resource allocation for SOC tools, staffing, and training.
- Lead proactive threat hunting initiatives to identify and mitigate potential risks.
- Maintain compliance with applicable security frameworks and regulatory requirements.
- Identify and implement automation opportunities to improve efficiency and reduce false positives.
Qualifications
- Bachelor’s degree in a STEM discipline (Computer Science, Information Security, Engineering, or related field) required; Master’s degree preferred.
- CISSP strongly preferred; CISM, GIAC, CEH, or equivalent certifications accepted.
- Minimum of 5 years of experience in cybersecurity, with at least 2 years in a SOC leadership or senior incident response role.
- Demonstrated expertise in SIEM, SOAR, EDR, threat intelligence, and incident response methodologies.
- Proven ability to lead teams in high-pressure operational environments.
- Strong written and verbal communication skills, with the ability to present to technical and executive audiences.
- Availability for crisis management and high-priority escalations as needed.