SOC Manager - Managed Security Services

$92,100 - $185,400/Yr

RSM - Harrisburg, PA

Full-time - Mid Level

Harrisburg, PA

251-500 employees

Professional, Scientific, and Technical Services

About the position

The SOC Manager will lead a centralized team of security operations personnel, ensuring effective service delivery across multiple client accounts in various industries. This role involves overseeing security operations, managing a team of analysts, and providing expertise in security monitoring, incident response, and vulnerability management. The SOC Manager will also be responsible for fostering a collaborative team environment and supporting the professional growth of team members.

Responsibilities

• Oversee the assigned shift and mature security operations center activities.
• Provide consolidated reporting and dashboards to operational leadership.
• Conduct technical interviews of potential analysts with the recruiting team.
• Manage security operations teams and identify necessary skill sets for team member growth.
• Provide leading practice recommendations in security operations and incident response.
• Support enterprise managed security solutions for various business use cases.
• Guide and mentor client counterparts through ongoing operational activities.
• Mentor and direct analysts, conducting quality reviews of their activities.

Requirements

• Bachelor's degree or higher.
• 7-10 years of related work experience, specifically 5+ years in a security operations center.
• Proven experience leading security operations center teams and interacting with external client teams.
• Experience using the ServiceNow suite for security operations workflow management.
• Utilization of SIEM technologies such as Splunk, LogRhythm, Azure Sentinel, and StellarCyber.
• Experience building and maturing security operation center capabilities and operations.
• Experience serving complex architectures and environments (cloud, on-prem, or hybrid).
• Experience with automation platforms such as SOAR tools.

Nice-to-haves

• Experience with common cloud platforms like AWS, Azure, and Google Cloud Platform.
• Familiarity with SOAR tools such as Torq, Phantom, and Forescout.
• Proficiency with AWS Security Center and popular security services.
• Knowledge of popular cloud security services (VPC, RDS, IAM, WAF, IDS/IPS, etc.).
• Experience with vulnerability tools like Kenna, Tenable, and Qualys.
• Familiarity with threat intelligence tools such as Recorded Future and ThreatConnect.
• Experience with endpoint detection and response tools like SentinelOne and Crowdstrike.

Benefits

• Flexible scheduling to balance work and personal life.
• Competitive benefits and compensation package.
• Discretionary bonus based on firm and individual performance.