Security Operations Center (SOC) Manager

About the role

The Security Operations Center (SOC) Manager leads the daily activities of the SOC analyst team, ensuring that monitoring, analysis, and escalation processes meet organisational service level agreements and security objectives. This role acts as the primary liaison for incident response and communicates critical security information to executive management when required.

Key responsibilities

• Oversee SOC analysts, processes, and technology to achieve security monitoring and escalation goals.
• Coordinate 24x7 shift schedules to guarantee continuous coverage.
• Serve as the principal liaison for incident response across the organisation.
• Communicate security incidents and metrics to executive leadership.
• Develop and track key performance indicators, metrics, and service level agreements for the SOC.
• Design and implement career development plans for SOC staff.

Required profile

• Minimum 7 years of security leadership experience.
• Strong background in ITIL methodologies and frameworks.
• Proven ability to design, implement and measure security KPIs and metrics.
• Experience creating shift schedules for 24x7 operations.
• Demonstrated understanding of information security, networking, and incident response.
• Previous management and project leadership experience.
• Excellent oral and written communication skills.

Required skills

• ITIL
• PowerShell
• Bash/ksh/sh scripting
• Cisco IOS scripting
• JunOS scripting
• Perl
• Tcl
• Lua
• Azure Sentinel
• Metasploit
• Vulnerability scanners
• Kali Linux
• Nmap
• SIEM platforms (Sentinel, Splunk, LogRhythm)
• IDS/IPS and firewalls (Snort, Cisco, Fortigate, Sourcefire)
• Windows and Unix operating systems
• LAN/WAN technologies
• Networking protocols
• Incident response processes
• Packet analysis and capture tools
• Security best practices and concepts