Senior Manager, Cyber Security Operations Center

Digital Realty•Dallas, TX

4d•$135,000 - $165,000•Hybrid

About The Position

The Senior Manager, Cyber Security Operations Center (SOC) is a hands‑on technical and people leader responsible for overseeing 24/7 global security monitoring, threat detection, and incident response across Digital Realty’s IT, OT, cloud, and product platform environments. This role owns real‑time situational awareness, rapid containment of cyber threats, and continuous improvement of cyber defense capabilities. This leader drives operational excellence within a high‑tempo global SOC, balancing decisive incident response with long‑term detection engineering, automation, and program maturity while building and mentoring a world‑class security operations team.

Requirements

8–12+ years of cybersecurity experience with at least 5 years in security operations or incident response leadership roles.
Deep technical expertise across SIEM/SOAR, EDR, NDR, cloud security monitoring, and log analytics platforms.
Strong working knowledge of Microsoft security tools and ecosystem.
Proven experience managing significant cyber incidents in complex, global environments.
Solid understanding of IT, OT, and cloud architectures and operational risk.
Experience aligning SOC operations with regulatory and compliance frameworks including NIST, ISO 27001, SOC 2, NIS2, DORA, PCI, SOX, and GDPR.
Demonstrated success building, scaling, and mentoring high‑performing global security teams.
Professional certifications such as CISSP, CISM, or GIAC strongly preferred.

Responsibilities

Lead day‑to‑day operations of a 24x7 global SOC using follow‑the‑sun and fusion center operational models.
Oversee real‑time monitoring, triage, escalation, and resolution of security events across enterprise IT, OT, cloud, and edge platforms.
Direct major cyber incident response efforts end‑to‑end, coordinating containment, eradication, recovery, and post‑incident analysis.
Own and continuously optimize SOC tooling including SIEM, SOAR, EDR/MDE, NDR, vulnerability management, and case management platforms.
Drive detection engineering, threat hunting, and intelligence integration to improve alert quality and adversary visibility.
Partner cross‑functionally with IT, OT, Product, Legal, Compliance, Risk, and Operations during high‑impact incidents.
Own SOC KPIs including MTTD, MTTR, detection coverage, and alert fidelity, reporting outcomes to executive leadership.
Lead the SOC technology modernization roadmap including automation, enrichment, and machine‑assisted detection capabilities.