Senior Cyber Security Manager – CSIRT, SOC

OnTrac

. Lead daily SOC/ARC monitoring, alert triage, investigations, and incident response .

Posted 11/5/2026full-timeRemote • United StatesSenior💰 $156,000 - $195,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in leading Security Operations and Incident Response teams, with a strong focus on developing and maturing SOC capabilities, operational metrics, and cybersecurity strategies. Proficient in managing complex investigations, coordinating high-severity incidents, and optimizing security tools and processes.

Highest-signal resume keywords

Cybersecurity Leadership ExperienceIncident Response ManagementSIEM/EDR/SOAR ImplementationOperational Metrics DevelopmentRegulatory Compliance Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityIncident ResponseDetection EngineeringSecurity Operations Center (SOC)Threat HuntingPost-Incident ReviewsOperational MetricsAI/ML Triage24x7 Staffing ModelsBudget Management

Soft Skills

LeadershipPersuasionJudgmentCoachingMentoring

Tools & Technologies

SIEMEDRSOARCybersecurity ToolsSecurity Technology Partners

Certifications & Qualifications

CISSPCISMGIAC GCIHGIAC GCIAGMONAzure Security Engineer AssociateMicrosoft Cybersecurity Architect Expert

Industry Keywords

NIST CSFMITRE ATT&CKCIS ControlsISO 27001PCI-DSSSOXHIPAA

Tech Stack

Tools & technologies

AzureCloudCyber Security

About the role

Key responsibilities & impact

Lead daily SOC/ARC monitoring, alert triage, investigations, and incident response
Manage analysts, shift leads, and incident handlers across all tiers
Define Tier 1/2/3 responsibilities and escalation criteria
Establish sustainable 24x7 coverage models using follow-the-sun, dedicated shifts, or hybrid on-call rotations
Ensure qualified staffing and service coverage through workforce planning
Build and mature incident response procedures, runbooks, and playbooks
Lead cyber incident response end-to-end and coordinate countermeasures and mitigating controls
Serve as the primary escalation point for complex investigations and significant incidents
Coordinate high-severity incidents across IT, Legal, Communications/PR, and executive leadership
Conduct post-incident reviews, tabletop exercises, cyber simulations, and readiness drills
Develop detection engineering and proactive threat-hunting programs
Tune SIEM, EDR, and other security technologies to improve efficacy and reduce false positives
Align detection use cases with MITRE ATT&CK, threat intelligence, emerging threats, and organizational risks
Establish and report MTTD, MTTR, MTTC, detection coverage, alert fidelity, incident volume, severity trends, and analyst productivity
Create SOC/ARC KPIs, KRIs, and executive dashboards
Optimize security tools, processes, and SIEM/SOAR platforms
Implement AI/ML-supported triage, correlation, and investigation capabilities
Align security operations with regulatory requirements and frameworks, including NIST CSF, NIST SP 800-61, MITRE ATT&CK, CIS Controls, ISO 27001, PCI-DSS, SOX, and HIPAA
Support audits, assessments, and evidence collection
Manage the SOC operating budget across tools, staffing, and managed services
Oversee MSSPs, MDR providers, incident response retainers, and security technology partners
Define and enforce vendor and contract SLAs
Recruit, coach, mentor, and develop security operations personnel
Establish career paths, training programs, skills assessments, and succession plans
Lead cybersecurity strategies and major projects affecting multiple areas of the organization
Set operational objectives, policies, procedures, and work plans
Engage with frontline and senior management across functions, departments, and customers
Navigate sensitive, complex situations using persuasion and sound judgment

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field
Master’s degree preferred
10 years of progressive, direct hands-on cybersecurity experience
5 years of leadership experience managing Security Operations, Incident Response, Cyber Defense, and SOC teams
Demonstrated experience building and maturing SOC capabilities, incident response programs, and detection engineering functions
Experience developing cybersecurity operational metrics, executive reporting, and performance dashboards, including MTTD, MTTR, KPIs, and KRIs
Proven success implementing SIEM, EDR, SOAR, and automated or AI-assisted response capabilities
Experience managing 24x7 staffing models, budgets, and third-party security vendors or MSSPs
Preferred certifications include CISSP, CISM, GIAC GCIH, GIAC GCIA, and GMON
Cloud security certifications such as Azure Security Engineer Associate or Microsoft Cybersecurity Architect Expert preferred
Must understand and adhere to OnTrac’s Acceptable Use policy and security guidelines

Benefits

Comp & perks

Medical, dental, and vision insurance
Life and short- and long-term disability coverage
401(k) retirement savings plan with company match
Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure-based increases up to 160 hours
Two (2) floating holidays per year
Paid sick leave
Six (6) paid company holidays
Two (2) weeks paid pregnancy disability leave
Four (4) weeks paid parental bonding leave
Additional wellness and employee assistance programs
Bonus, commission, or other incentive compensation may be available, up to a 20% Bonus Target