Security Operations

• Lead Security Operations on the Cyber Engineering & Defense team
• Directly manage Cyber Defense engineers and analysts
• Own an 8-person L1/L2 SOC contractor pod under a managed-services model
• Own SOC operational performance, including alert triage MTTD/MTTR, true-positive rate, ticket throughput, and time-to-containment
• Serve as incident commander for Sev1 and escalated security incidents
• Manage severity determination, cross-functional and executive communications, and resolution paths
• Own operational accountability for AI agents in the SOC and detection-and-response pipeline
• Define escalation thresholds, human-in-the-loop checkpoints, and output quality controls
• Manage the MSP/contractor relationship, including onboarding, performance, retention, and escalation quality
• Translate Cyber Defense strategy into a tactical SecOps roadmap
• Own the SecOps Jira project and quarterly sequencing
• Own quality of Cyber Defense tooling, including SIEM detection content, source health, CrowdStrike administration, NG-SIEM migration, and SOAR runbooks
• Run a healthy 24x7 on-call rotation across FTE and contractor coverage
• Provide day-to-day management, coaching, weekly 1:1s, and career development for Cyber Defense staff
• Partner with Agentic Cyber Engineering on capability definition, development, and delivery of agentic systems

Explore Manager II, Security Operations at SPS Commerce. Review requirements and application details.