SOC Manager

Ensign is hiring !

Job Summary:

The SOC Manager is responsible for overseeing the Security Operations Center (SOC) and ensuring the organization’s systems, networks, and data are protected against cyber threats. This role involves managing SOC operations, leading incident response efforts, and ensuring compliance with cybersecurity policies and standards. The SOC Manager will lead a team of security analysts and engineers to monitor, detect, and respond to security incidents effectively.

Key Responsibilities:

SOC Operations Management:

• Oversee the day-to-day operations of the SOC, including monitoring, detection, and response to security incidents.
• Ensure the SOC operates 24/7 to provide continuous threat monitoring and response.
• Manage and optimize SOC tools and technologies (e.g., SIEM, IDS/IPS, threat intelligence platforms).
   

Incident Response Leadership:

• Lead and coordinate incident response activities during security breaches or cyberattacks.
• Develop and maintain incident response plans, playbooks, and procedures.
• Conduct post-incident reviews and implement improvements to prevent future incidents.
   

Threat Monitoring and Analysis:

• Monitor and analyze security alerts and logs to identify potential threats.
• Ensure timely detection, investigation, and escalation of security incidents.
• Stay updated on the latest cybersecurity threats, vulnerabilities, and attack techniques.
   

Team Leadership and Development:

• Manage and mentor a team of SOC analysts and engineers.
• Provide training and guidance to enhance the team’s technical skills and knowledge.
• Conduct performance evaluations and set goals for the SOC team.
   

Vulnerability and Risk Management:

• Collaborate with IT and security teams to identify and remediate vulnerabilities.
• Conduct regular risk assessments and recommend mitigation strategies.
   

Reporting and Communication:

• Prepare and present SOC performance reports to senior management.
• Communicate security risks and incidents to stakeholders in a clear and timely manner.
• Maintain documentation for SOC processes, incidents, and compliance.
   

Continuous Improvement:

• Evaluate and implement new security tools and technologies to enhance SOC capabilities.
• Develop and update SOC policies, procedures, and workflows.
• Foster a culture of continuous improvement within the SOC team.

Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• Minimum 5-7 years of experience in cybersecurity, with at least 3 years in a SOC leadership role.
• Professional certifications (e.g., CISSP, CISM, GIAC, CEH) are highly desirable.
• Strong knowledge of SOC tools (e.g., SIEM, EDR, threat intelligence platforms).

Key Competencies:

• Strong leadership and team management skills.
• Excellent analytical and problem-solving abilities.
• Effective communication and stakeholder management skills.
• Ability to work under pressure and manage multiple priorities.
• Proactive and strategic mindset with a focus on continuous improvement.