Security Operations Manager

AIOPSGROUP Careers

. Lead day-to-day SOC operations and triage critical security incidents .

Posted 10/5/2026full-timeSofia • BulgariaSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in leading security operations teams and incident response, with a strong focus on security architecture design and compliance with regulatory frameworks. Capable of translating technical risks into business language and effectively communicating with executive leadership.

Highest-signal resume keywords

Cybersecurity LeadershipIncident Response ManagementSecurity Architecture DesignRegulatory Compliance KnowledgeStakeholder Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat DetectionLog AnalyticsIncident HandlingCloud Security ArchitectureVulnerability ScanningSecurity Metrics DefinitionPerformance ManagementEscalation Path OwnershipOperational KPI ReportingRisk Prioritization

Soft Skills

MentoringTeam DevelopmentStakeholder ManagementCommunication

Tools & Technologies

SIEMEDR/XDRSOARIAM

Certifications & Qualifications

CISSPCISMCCSPGCIAGCIH

Industry Keywords

SOC OperationsIncident CommanderISO 27001NIS2SOC 2NIST CSFRegulatory NotificationSecurity Awareness CampaignsPhishing SimulationsSecure-By-Design Principles

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Lead day-to-day SOC operations and triage critical security incidents
Define incident response playbooks and mentor Tier 1–3 analysts
Line-manage and grow the security operations team, including shift and on-call planning, recruitment, onboarding, goal setting, performance reviews, and development plans
Own severity classification and escalation models and act as incident commander during major incidents
Coordinate incident response across IT, Legal, Communications, and executive stakeholders, including regulatory notification timelines where applicable
Define and report operational KPIs including detection and response times, detection coverage, incident trends, and vulnerability remediation against SLA
Report regularly to the CISO and provide periodic risk summaries to executive leadership and audit
Design and implement resilient enterprise security architectures across hybrid and cloud environments using secure-by-design principles
Lead security architecture initiatives
Direct continuous vulnerability scanning, risk prioritization, remediation tracking, and cross-team patch management workflows
Partner with the CISO to align technical operations with ISO 27001, NIS2, SOC 2, NIST CSF, audit requirements, and risk registers
Oversee technical setup of security awareness campaigns, simulated phishing operations, and security enablement programs
Evaluate, deploy, and optimize SIEM, EDR/XDR, SOAR, and IAM tooling

Requirements

What you’ll need

7+ years in cybersecurity (84 months), including proven experience leading SOC teams or security operations alongside hands-on security architecture design
Demonstrated experience leading a team of security analysts, including hiring, shift planning, performance management, and developing people
Proven track record of owning escalation paths and leading responses to major security incidents under time pressure
Experience defining security metrics and presenting them to senior management, including translating technical exposure into business risk
Deep knowledge of threat detection, log analytics, incident handling, cloud security architecture (Azure, AWS, or GCP), and vulnerability scanning platforms
Strong working knowledge of regulatory and compliance frameworks, with ability to translate GRC requirements into actionable technical controls
Exceptional stakeholder management skills, communicating complex technical risks to executive leadership and mentoring technical engineers
Certifications such as CISSP, CISM, CCSP, GCIA, GCIH, or equivalent technical credentials are preferred

Benefits

Comp & perks

Competitive remunerations and benefits package
Opportunity to grow your career and get exposure to international brands, working on complex multi-technology projects
Friendly, yet competitive work environment where everyone's success is celebrated
Flexible working hours/working location