Manager, Security Operations Center

Workstreet

. Own the day-to-day operation of a 24x7 SOC monitoring client environments .

Posted 11/2/2026full-timeRemote • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in managing 24x7 SOC operations, leading teams of analysts, and ensuring compliance with security standards. Proficient in performance management, incident communication, and operational metrics reporting.

Highest-signal resume keywords

24x7 SOC Operations ManagementTeam Leadership and DevelopmentEDR, Firewall, IPS, WAF, SIEM ExpertiseClient Relationship ManagementActive Security Certification (CISSP, CISM, GCIH, GCIA)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security Operations ExperienceIncident Review and InvestigationAutomation (Python, PowerShell, SOAR)SOC Metrics and ReportingPerformance Management

Soft Skills

Clear Written and Verbal CommunicationDecision-Making Under PressureTeam BuildingCoaching and Mentoring

Tools & Technologies

EDR PlatformsSIEM PlatformsFirewall TechnologiesIPS TechnologiesWAF Technologies

Certifications & Qualifications

CISSPCISMGCIHGCIA

Industry Keywords

SOC 2 ComplianceISO 27001 ComplianceHIPAA ComplianceMSSP ExperienceOperational Metrics

Tech Stack

Tools & technologies

Python

About the role

Key responsibilities & impact

Own the day-to-day operation of a 24x7 SOC monitoring client environments
Lead, coach, and develop a team of 10 or more SOC analysts
Build and maintain 24x7 shift schedules with appropriate coverage and skill mix
Recruit, interview, and onboard analysts
Run training programs and support analyst certification and development goals
Manage burnout and retention risks in round-the-clock operations
Own SOC performance against client SLAs and track operational metrics
Review investigations and escalations for accuracy, completeness, and clarity
Oversee monitoring across EDR, firewall, IPS, WAF, and SIEM platforms
Prioritize detection tuning to reduce noise and close coverage gaps
Maintain SOC runbooks, playbooks, and shift handoff procedures
Run post-incident reviews and incorporate lessons learned into detections, procedures, and training
Serve as senior client point of contact for SOC delivery, escalations, and incident communications
Lead recurring service reviews covering alert volume, notable incidents, trends, and improvements
Support client onboarding by scoping log sources, tooling, escalation paths, and response responsibilities
Handle client concerns and escalations
Report SOC performance, staffing, and risk to Workstreet leadership
Partner with GRC engineers and vCISOs to support client compliance obligations
Identify improvements to tooling, automation, and process and develop business cases

Requirements

What you’ll need

7+ years of security operations experience
3+ years managing a SOC team or comparable security operations function
Experience running a 24x7 SOC operation
Experience leading teams of 10 or more analysts, including hiring, performance management, and scheduling
Strong working knowledge of EDR, firewall, IPS, WAF, and SIEM platforms
Ability to review investigations and identify missed issues
Experience owning client relationships and explaining incidents, trends, and SLA performance to technical and executive audiences
Ability to make sound decisions under pressure and remain composed during escalations
Clear written and verbal communication skills
Willingness to work flexible hours when needed for coverage, escalations, or shift transitions
Active security or leadership certification such as CISSP, CISM, GCIH, GCIA, or equivalent
Prior MSSP experience supporting multiple client environments simultaneously
Hands-on administration, configuration, maintenance, and tuning of EDR, SIEM, firewall, IPS, or WAF platforms
Experience with automation, including Python, PowerShell, or SOAR playbook development
Familiarity with SOC 2, ISO 27001, or HIPAA compliance frameworks
Experience building SOC metrics, dashboards, and client/leadership reporting
Excellent written and verbal English communication skills
Reliable high-speed internet connection and professional home office environment
Ability to work 8:00 AM–5:00 PM U.S. Eastern Time
Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities
Must participate in live video interviews with camera on and verify identity during recruitment and onboarding
Employment contingent upon identity verification and background screening, where permitted by law
Must be authorized to work in the U.S. without visa sponsorship now or in the future

Benefits

Comp & perks

Career development with mentorship and training opportunities
Reimbursement for approved training and certification courses relevant to the current role
Competitive base salary
Regular performance reviews linked to merit-based appraisals
Bonus opportunities
Significant room for career advancement
Remote-first culture with flexibility to work from anywhere while collaborating with a global team