Manager, Security Operations Center

Workstreet

7d • Remote

About The Position

Workstreet is seeking a Security Operations Center (SOC) Manager to lead the day-to-day operation of a 24x7 SOC monitoring client environments. The role manages 10 or more SOC analysts across rotating shifts. The SOC investigates alerts, delivers findings and remediation guidance, and escalates to client stakeholders, who carry out responses in their own environments.

This is a working leadership role responsible for scheduling and shift coverage, investigation quality, analyst coaching, and client-facing service delivery. The manager remains close to the EDR, firewall, IPS, WAF, and SIEM tooling to evaluate detection quality and serves as a senior client contact for service performance and escalations. The successful candidate is expected to take ownership of shift coverage, team performance, and client-facing SOC delivery within the first 60 days.

The position is remote-first and follows a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time, with flexibility when needed to support coverage, escalations, or shift transitions. Occasional local travel may be required.

Requirements

• 7+ years of security operations experience, including 3+ years managing a SOC team or comparable security operations function.
• Experience running a 24x7 SOC operation and maintaining coverage, quality, and morale across shifts.
• Experience leading teams of 10 or more analysts, including hiring, performance management, and scheduling.
• Strong working knowledge of EDR, firewall, IPS, WAF, and SIEM platforms, with hands-on depth sufficient to review investigations and identify missed issues.
• Ability to own client relationships and explain incidents, trends, and SLA performance to technical and executive audiences.
• Sound decision-making under pressure and composure during active escalations.
• Clear written and verbal communication, and ability to maintain high standards for analyst reports and client communications.
• Willingness to work flexible hours when needed to support coverage, escalations, or shift transitions.
• Excellent written and verbal English communication skills and confidence engaging with candidates, hiring managers, and business leaders across global teams.
• Reliable, high-speed internet connection and a professional home office suitable for confidential conversations, virtual interviews, and uninterrupted collaboration.
• Commitment to a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time.
• Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities.
• Authorization to work in the U.S. without visa sponsorship now or in the future; Workstreet does not provide employment-based visa sponsorship or transfers.
• Participation in live video interviews with camera on and readiness to verify identity during recruitment and onboarding; employment is contingent upon identity verification and background screening where permitted by law.

Nice To Haves

• Active security or leadership certifications such as CISSP, CISM, GCIH, GCIA, or equivalent.
• Prior MSSP experience supporting multiple client environments simultaneously.
• Hands-on administration of security toolsets, including configuring, maintaining, and tuning EDR, SIEM, firewall, IPS, or WAF platforms.
• Experience with automation, such as scripting in Python or PowerShell, or SOAR playbook development.
• Familiarity with SOC 2, ISO 27001, or HIPAA and how SOC activity supports audit readiness.
• Experience building SOC metrics, dashboards, and reporting for clients and leadership.

Responsibilities

• Lead, coach, and develop a team of 10 or more SOC analysts through regular one-on-ones, clear goals, and performance feedback.
• Build and maintain the 24x7 shift schedule, ensuring appropriate coverage and skill mix, including nights, weekends, and holidays.
• Recruit, interview, and onboard analysts, and run a training program to help them investigate independently.
• Set analyst career paths and development plans and support certification and training goals.
• Manage burnout and retention risks associated with round-the-clock operations.
• Own SOC performance against client SLAs and track metrics including time to acknowledge, time to investigate, escalation quality, and false positive rate.
• Review investigations and escalations for accuracy, completeness, and clarity before they reach clients, and coach analysts on gaps.
• Oversee monitoring across EDR, firewall, IPS, WAF, and SIEM platforms; prioritize detection tuning to reduce noise and close coverage gaps.
• Maintain SOC runbooks, playbooks, and shift handoff procedures so investigations continue between shifts.
• Run post-incident reviews and apply lessons learned to detections, procedures, and training.
• Serve as the senior client contact for SOC service delivery, escalations, and incident communications.
• Lead recurring client service reviews covering alert volume, notable incidents, trends, and recommended improvements.
• Work with clients during onboarding to scope log sources, tooling, escalation paths, and response responsibilities.
• Address client concerns and escalations urgently and calmly, making decisions without waiting for direction.
• Report SOC performance, staffing, and risk to Workstreet leadership on a regular cadence.
• Partner with GRC engineers and vCISOs to support client compliance obligations, including SOC 2, ISO 27001, and HIPAA.
• Identify opportunities to improve tooling, automation, and processes, and make the business case for them.
• Work a standard schedule of 8:00 AM–5:00 PM U.S. Eastern Time and travel locally for occasional onsite meetings, team gatherings, or business activities as needed.

Benefits

• Career development path with mentorship and training opportunities.
• Reimbursement for successful completion of approved role-related training and certification courses.
• Competitive base salary, regular performance reviews linked to merit-based appraisals, and bonus opportunities.
• Career advancement opportunities at an early-stage company.
• Remote-first culture with flexibility to work from anywhere while collaborating with a global team.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed