SOC Manager - Americas

StoneX Group • Chicago, IL

8d • Hybrid

About The Position

The Security Operations Center Manager - Americas leads day-to-day security monitoring and response operations at StoneX and helps shape the future of its Security Operations Center. The role is responsible for building an operationally strong, continuously improving, and sustainable SOC, including helping build and operationalize an agentic Security Operations platform that uses AI and automation to improve alert triage, investigation, enrichment, workflow orchestration, and analyst decision-making. The manager partners with AI, Detection Engineering, Threat Intelligence, and Security Engineering teams to turn new capabilities into practical security improvements while maintaining appropriate human oversight, governance, and accountability.

The manager develops analysts, coordinates response to priority cybersecurity events, ensures consistent investigations and reporting, and maintains effective documentation and handoffs across regions and time zones. The role emphasizes team wellbeing, operational metrics, continuous improvement, and reducing unnecessary alert noise and repetitive work. The typical schedule includes at least four days per week in the office, participation in an on-call rotation with after-hours leadership support during major incidents, and occasional travel for team or business needs.

Requirements

• At least 3 years of Security Operations Center or incident response experience, with demonstrated leadership, mentoring, or people management experience.
• Strong experience triaging security alerts, investigating incidents, and interpreting detection content.
• Strong communication skills, including the ability to coach others, lead in high-pressure situations, and document investigations clearly.
• Experience monitoring and investigating threats across cloud and on-premises environments.
• Familiarity with scripting or security query languages such as SPL, KQL, or similar technologies.
• Ability to make sound decisions quickly, manage shifting priorities, and positively influence team performance during critical situations.

Nice To Haves

• Experience with MITRE ATT&CK, threat hunting, or detection engineering concepts and practices.
• Experience with security orchestration, automation, and response platforms.
• Familiarity with metrics-driven SOC management and continuous improvement practices.
• Experience applying AI, automation, or emerging technologies to security operations, including alert triage, investigation, enrichment, analyst decision support, or workflow orchestration.
• Familiarity with agentic AI concepts, responsible AI practices, and the opportunities and risks of autonomous or semi-autonomous capabilities in security operations.
• Formal leadership training or experience managing geographically distributed teams.
• Associate’s or bachelor’s degree in Cybersecurity, Information Technology, or a related field; equivalent professional experience and non-traditional paths are welcomed.
• Certifications such as GCIH, GCIA, SC-200, or similar practitioner-level credentials.

Responsibilities

• Lead SOC monitoring, triage, investigation, escalation, and response operations in alignment with procedures and service expectations.
• Help shape, build, and operationalize an agentic Security Operations platform, applying AI and automation to triage, investigations, enrichment, orchestration, and analyst decision support.
• Ensure AI and automation capabilities provide measurable operational value with appropriate human oversight, governance, and accountability.
• Build a healthy, accountable, and sustainable team environment and address workload, alert fatigue, and team wellbeing.
• Coach and develop analysts through regular feedback, clear expectations, growth opportunities, and support for technical capability and judgment.
• Manage escalations and coordinate response activities during priority cybersecurity events, engaging relevant teams and stakeholders.
• Maintain documentation, communication, and handoffs across regions and time zones.
• Drive consistency and quality in investigations, documentation, and reporting through coaching, review, and clear expectations.
• Partner with Threat Intelligence and Engineering teams to validate alerts, test detection use cases, improve processes, and strengthen detection and response.
• Use operational metrics, team feedback, AI, and automation to improve alert quality, reduce unnecessary noise and repetitive work, and improve security outcomes and analyst experience.
• Review investigations, operational priorities, workload, escalations, operational handoffs, alert volumes, and team feedback.
• Participate in an on-call rotation and provide after-hours leadership support during major cybersecurity incidents or significant operational events.
• Occasionally travel for team meetings, leadership gatherings, or other business needs.

Benefits

• Full range of medical, financial, and/or other benefits, dependent on the position.
• May be eligible to participate in an incentive compensation plan, subject to business performance and management recommendations.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager
• Education Level: No Education Listed