Security Operations Center Manager - Americas

StoneX Group•Chicago, IL

7h•$150,000 - $180,000•Hybrid

About The Position

Connecting clients to markets – and talent to opportunity.With 5,400+ employees and over 80,000 institutional, commercial, and payments clients, we operate from more than 80 offices spread across six continents. As a Fortune 100, Nasdaq-listed provider, we connect clients to the global markets – focusing on innovation, human connection, and providing world-class products and services to all types of investors.Whether you want to forge a career connecting our retail clients to potential trading opportunities, or ingrain yourself in the world of institutional investing, StoneX Group is made up of four business segments that offer endless potential for progression and growth.Corporate: Engage in a deep variety of business-critical activities that keep our company running efficiently. From strategic marketing, financial management, human resources, and operational oversight, you’ll have the opportunity to optimize processes and implement game-changing policies. At StoneX, our Security Operations Center is more than a place where alerts are monitored—it’s where people, technology, intelligence, and increasingly AI come together to protect the business. As the Security Operations Center Manager - Americas, you’ll lead day-to-day security monitoring and response operations while helping shape the next generation of how security operations are performed at StoneX. Your mission is to build a Security Operations Center that is operationally strong, continuously improving, and sustainable for the people who work within it. A key part of that mission will be helping build and operationalize StoneX’s agentic Security Operations platform, using AI and automation to transform how we triage alerts, investigate threats, enrich information, orchestrate workflows, and support analyst decision-making. You’ll work closely with our AI, Detection Engineering, Threat Intelligence, and Security Engineering teams to turn emerging capabilities into practical improvements in how we defend the organization.

Requirements

3+ years of Security Operations Center or incident response experience, with demonstrated leadership, mentoring, or people management experience.
Strong experience triaging security alerts, investigating incidents, and interpreting detection content.
Strong communication skills with the ability to coach others, lead during high-pressure situations, and document investigations clearly.
Experience monitoring and investigating threats across cloud and on-premises environments.
Familiarity with scripting or security query languages such as SPL, KQL, or similar technologies.
Ability to make sound decisions quickly, manage shifting priorities, and positively influence team performance during critical situations.

Nice To Haves

Experience with MITRE ATT&CK, threat hunting, or detection engineering concepts and practices.
Experience with security orchestration, automation, and response platforms.
Familiarity with metrics-driven Security Operations Center management and continuous improvement practices.
Experience applying AI, automation, or emerging technologies to security operations, including areas such as alert triage, investigation, enrichment, analyst decision support, or workflow orchestration.
Familiarity with agentic AI concepts, responsible AI practices, and the opportunities and risks associated with introducing autonomous or semi-autonomous capabilities into security operations.
Formal leadership training or experience managing geographically distributed teams.
Associate’s or bachelor’s degree in Cybersecurity, Information Technology, or a related field. Equivalent professional experience and non-traditional paths are welcomed.
Certifications such as GCIH, GCIA, SC-200, or similar practitioner-level credentials.

Responsibilities

Lead Security Operations Center activities, ensuring monitoring, triage, investigation, escalation, and response processes are consistent, measurable, and aligned with established procedures and service expectations.
Help shape, build, and operationalize StoneX’s agentic Security Operations platform, partnering with AI engineers and security teams to apply AI and automation across triage, investigation, enrichment, orchestration, and analyst decision support. Ensure capabilities deliver measurable operational value while maintaining appropriate human oversight, governance, and accountability.
Build a healthy, accountable, and sustainable team environment where analysts can perform at a high level without burnout becoming an accepted cost of operating a security function.
Coach and develop analysts, providing regular feedback, clear expectations, growth opportunities, and support that strengthens technical capability, judgment, and confidence.
Manage escalations and coordinate response activities during priority cybersecurity events, ensuring the right teams and stakeholders are engaged when needed.
Ensure effective documentation, communication, and handoffs across regions and time zones so important context and accountability aren’t lost between teams.
Drive consistency and quality across investigations, documentation, and reporting through coaching, review, and clearly defined expectations.
Work closely with Threat Intelligence and Engineering teams to validate alerts, test detection use cases, improve processes, and strengthen overall detection and response capabilities.
Use operational metrics, team feedback, AI, and automation to improve alert quality, reduce unnecessary noise and repetitive work, strengthen processes, and continuously improve both security outcomes and the analyst experience.