soc manager

VaporVM

<div><div><div><b>Date Posted:</b></div>
12 February, 2026</div>
<div><div><b>Industry:</b></div>
IT Services and IT Consulting</div>
<div><div><b>Location:</b></div>
VAPORVM IT SERVICES DMCC</div></div>
<br><div><h2 class="jobSectionHeader"><b>Job Description:</b></h2><br>
<p></p><div><h1 class="jobSectionHeader"><b>Service Delivery Manager</b></h1>
<h1 class="jobSectionHeader"><b>Telco Cybersecurity Operations</b></h1>
<h1 class="jobSectionHeader"><b>Role Purpose</b></h1>
<p>
The Service Delivery Manager (SDM) is accountable for the end-to-end delivery, stability, and continuous improvement of Telco Cybersecurity Operations, ensuring contractual, regulatory, and operational commitments are consistently met. This role acts as the primary operational interface between cybersecurity operations, network/NOC teams, vendors, and client stakeholders, ensuring SLAs, OLAs, and SLOs are achieved while protecting the integrity, independence, and operational effectiveness of the cybersecurity function.</p>
<h1 class="jobSectionHeader"><b>
Key Responsibilities</b></h1>
<h2 class="jobSectionHeader"><b>Service Delivery &amp; Operational Governance</b></h2>
<ul><li>Own and manage end-to-end service delivery for Telco Cybersecurity Operations (SOC, NOC-SOC integration, network security, infrastructure security).</li></ul>
<ul><li>Define, monitor, and enforce SLAs, OLAs, and SLOs across internal teams, partners, and third-party vendors.</li></ul>
<ul><li>Ensure service continuity, availability, and resilience across mission-critical telco environments (core, access, transport, IMS, MCX, IoT).</li></ul>
<ul><li>Chair and govern operational service reviews, including daily, weekly, and monthly service cadence.</li></ul>
<ul><li>Drive service improvement initiatives based on trend analysis, RCA, and operational KPIs.</li></ul><br>
<p></p>
<h2 class="jobSectionHeader"><b>
Stakeholder &amp; Client Management</b></h2>
<ul><li>Act as the single accountable operational owner for cybersecurity service delivery toward the customer.</li></ul>
<ul><li>Lead senior stakeholder engagement across technology, network, operations, and business teams.</li></ul>
<ul><li>Represent cybersecurity operations in cross-functional forums, ensuring security positions are clearly articulated, justified, and professionally defended using risk, impact, and service-assurance arguments.</li></ul>
<ul><li>Manage escalations calmly and authoritatively, balancing service availability, security posture, and contractual obligations.</li></ul>
<ul><li>Build strong, trusted relationships with client counterparts, including service owners, NOC heads, infrastructure leaders, and risk/compliance teams.</li></ul>
<h2 class="jobSectionHeader"><b>
SLA / OLA / SLO Management &amp; Reporting</b></h2>
<ul><li>Design, implement, and continuously refine service metrics and dashboards.</li></ul>
<ul><li>Ensure transparent and accurate SLA reporting, including breach analysis and remediation plans.</li></ul>
<ul><li>Translate technical service data into executive-level insights for senior management.</li></ul>
<ul><li>Drive corrective actions and service recovery plans when targets are at risk.</li></ul>
<ul><li>Lead service acceptance, transition, and stabilization for new services or platforms.</li></ul>
<h2 class="jobSectionHeader"><b>
Team Leadership &amp; People Management</b></h2>
<ul><li>Lead and manage large, multi-disciplinary operations teams, including SOC analysts, security engineers, NOC interfaces, and service coordinators.</li></ul>
<ul><li>Establish clear roles, RACI, shift models, and escalation paths.</li></ul>
<ul><li>Foster a culture of operational discipline, accountability, and continuous improvement.</li></ul>
<ul><li>Coach team leads and senior engineers on stakeholder communication, prioritization, and incident handling.</li></ul>
<ul><li>Ensure operational readiness through training, runbooks, and drills.</li></ul><br>
<p></p>
<h2 class="jobSectionHeader"><b>
Telco, NOC &amp; Security Operations Integration</b></h2>
<ul><li>Ensure seamless operational integration between SOC and NOC functions.</li></ul>
<ul><li>Oversee security monitoring across telco networks, core infrastructure, cloud platforms, and critical applications.</li></ul>
<ul><li>Coordinate incident handling across network, security, and IT domains.</li></ul>
<ul><li>Ensure incident, problem, and change management processes align with telco operational realities.</li></ul>
<ul><li>Support major incident management (MIM) and post-incident reviews.</li></ul>
<h2 class="jobSectionHeader"><b>
Risk, Compliance &amp; Service Assurance</b></h2>
<ul><li>Ensure cybersecurity services align with regulatory, contractual, and internal governance requirements.</li></ul>
<ul><li>Participate in audits, compliance reviews, and service assurance assessments.</li></ul>
<ul><li>Ensure service delivery models support high-availability and mission-critical environments.</li></ul>
<ul><li>Identify operational risks early and implement mitigation plans.</li></ul>
<h1 class="jobSectionHeader"><b>
Required Experience &amp; Qualifications</b></h1>
<h2 class="jobSectionHeader"><b>Experience</b></h2>
<ul><li>10+ years in service delivery, operations, or managed services roles within Telco, Critical Infrastructure, or Large Enterprise environments.</li></ul>
<ul><li>Strong hands-on experience managing SLA, OLA, and SLO-driven services.</li></ul>
<ul><li>Proven background in NOC operations, Telco networks, or large-scale infrastructure operations.</li></ul>
<ul><li>Demonstrated experience managing large operations teams (24&times;7 environments preferred).</li></ul>
<ul><li>Prior exposure to SOC / Cybersecurity Operations within telco or service provider environments.</li></ul>
<ul><li>Track record of managing complex stakeholders and high-pressure operational situations.</li></ul>
<h1 class="jobSectionHeader"><b>
Technical &amp; Domain Knowledge</b></h1>
<ul><li>Solid understanding of: Telco network architectures (core, access, transport)</li></ul>
<ul><li>NOC operations and tooling</li></ul>
<ul><li>SOC operations, incident management, and escalation models</li></ul>
<ul><li>Network and infrastructure security concepts</li></ul>
<ul><li>Familiarity with ITSM frameworks (ITIL or equivalent).</li></ul>
<ul><li>Comfortable engaging with engineers, architects, and executives alike.</li></ul>
<h1 class="jobSectionHeader"><b>
Leadership &amp; Behavioral Attributes</b></h1>
<ul><li>Strong executive presence with the ability to hold firm positions professionally and credibly.</li></ul>
<ul><li>Calm, structured, and decisive under pressure.</li></ul>
<ul><li>Excellent communication skills&mdash;both written and verbal.</li></ul>
<ul><li>Highly organized with strong governance and follow-through.</li></ul>
<ul><li>Able to balance security rigor with service availability and business priorities.</li></ul>
<h1 class="jobSectionHeader"><b>
Preferred / Nice to Have</b></h1>
<ul><li>Experience in mission-critical telco services (MCX, public safety, private LTE/5G).</li></ul>
<ul><li>Experience in multi-vendor, multi-technology environments.</li></ul>
<ul><li>Exposure to regulatory or national critical infrastructure environments.</li></ul>
<ul><li>Formal ITSM or service management certifications.</li></ul></div></div><p></p>

Service Delivery Manager

Hope Global School

<div><h3 class="jobSectionHeader"><b>Job Description</b></h3>
<div><p>Manager, SOC / NOC Services leads security and network operations teams, ensuring continuous monitoring, threat detection, incident response, system performance, and infrastructure availability while maintaining compliance, cybersecurity standards, and service excellence.</p>
</div>
<h3 class="jobSectionHeader"><b>Key Responsibilities</b></h3>
<ul><li>Lead SOC and NOC operational monitoring teams</li>
<li>Ensure continuous network performance and availability management</li>
<li>Oversee cybersecurity incident detection and response processes</li>
<li>Develop service level agreements and performance metrics</li>
<li>Coordinate escalation procedures during critical system outages</li>
<li>Implement security tools and network monitoring solutions</li>
<li>Prepare operational reports for executive leadership review</li>
<li>Maintain compliance with cybersecurity policies and regulations.</li>
</ul><h3 class="jobSectionHeader"><b>Skill &amp; Experience</b></h3>
<ul><li>Strong knowledge of cybersecurity and network infrastructure</li>
<li>Expertise in SIEM tools and monitoring platforms</li>
<li>Ability to manage high pressure incidents effectively</li>
<li>Excellent leadership and team management capabilities</li>
<li>Strong analytical and problem solving abilities</li>
<li>Effective communication with technical and business stakeholders.</li>
</ul>
<p><b>Note:</b> Salary depends on experience and skills and is paid in local currency.</p></div>
<br><div></div><div><ul><li><div><div>Date Posted</div>
<div>February 11, 2026</div>
</div></li><div></div><li><div><div>Location</div>
<div><div>Kuwait City, Kuwait
</div></div></div></li><div></div><li><div><div>Offered Salary:</div>
 <div>18800 - 27500 / year</div>
</div></li><div></div><li><div><div>Expiration date</div>
<div>August 8, 2028
</div></div></li><div></div><li><div><div>Experience</div>
<div>2 Year
</div></div></li><div></div><li><div><div>Gender</div>
<div>Both
</div></div></li><div></div><li><div><div>Qualification</div>
<div>Bachelor Degree</div></div></li></ul></div>

Manager, SOC / NOC Services

United Airlines

<div>Achieving our goals starts with supporting yours. Grow your career, access top-tier health and wellness benefits, build lasting connections with your team and our customers, and travel the world using our extensive route network.<br>
<br>
Come join us to create what&rsquo;s next. Let&rsquo;s define tomorrow, together.<br>
<h2 class="jobSectionHeader"><b>
Description</b></h2><p>
Our Network Operations team works around the clock running United&rsquo;s global operation, safely, reliably and efficiently. From dispatching and routing our fleet to coordinating with maintenance line planning and crew scheduling, this team makes caring connections with our internal customers and ultimately, United&rsquo;s customers. From pushback to landing, the Network Operations team is the eyes and ears on the ground no matter where in the world your United flight takes you.</p><p><b>
Job overview and responsibilities</b></p><p>
The Manager &ndash; SOC Performance &amp; Execution role drives development and execution of SOC tools, training, processes, and other critical areas needed for standardization within the SOC scope. This role will act as a support to the Director &ndash; SOC Performance &amp; Execution in liaising with various other groups such as the NOC, Tools &amp; Technology Teams, ATW / BTW Performance &amp; Execution Teams, and more. The goal of this role will be representing the needs and priorities of the Hub SOCs, Move Team, and Line Station Ops Representatives by management and development of tools and technology.</p><ul><li>
Provides comprehensive product project management support, representing the needs and priorities of the SOCs (Stations Operations Control), Move Team, and Line Station Operations, and collaborates across departments to work on projects aligned with United's United Next goals</li><li>
Partners with Hub Managing Directors, Directors, and SOC &amp; Move Team Sr Managers to create a strategic vision for United's future in these roles, supporting their capacity to manage a growing flight schedule</li><li>
Builds and maintains performance tools, and creates visibility and insights around operational metrics</li><li>
Development will be focused on Power BI and Microsoft Power Platform technology</li><li>
Presents regular updates to key divisional and cross-departmental executives regarding progress on key initiatives and supporting implementation of acquired feedback</li></ul><p>
NOTE: This position is located at the AHSC-Arlington Heights Service Center located in Arlington Heights, IL and considered as a hybrid role working 3 days in office, however that may evolve with the needs of the company.</p><h2 class="jobSectionHeader"><b>
Qualifications</b></h2><div><h4 class="jobSectionHeader"><b>
What&rsquo;s needed to succeed (Minimum Qualifications):</b></h4><ul><li>
Bachelor's degree or 4 years of relevant work experience in Business, Project Management, Airline Operations, and or Computer Science</li><li>
3+ years of experience in a strategic operational role required (Airline/Airport related Preferred)</li><li>
1+ years of leadership experience with projects and influencing senior level management and key stakeholders</li><li>
Proven track record for decisive action backed by strategic planning, continuous improvement, analytical thinking, goal-directed leadership and service-oriented performance</li><li>
Ability to work in a time constrained, very high-pressure environment</li><li>
Ability to conform to shifting priorities, demands and timelines through analytical and problem-solving capabilities</li><li>
Excellent communication</li><li>
Analytical understanding of IRROPs</li><li>
Comprehensive understanding of tools and process within the SOC scope</li><li>
Must be willing and able to travel 25% domestic</li><li>
Must be willing and able to work a hybrid schedule at the AHSC-Arlington Heights Service Center located in Arlington Heights, IL</li><li>
Must be legally authorized to work in the United States for any employer without sponsorship</li><li>
Successful completion of interview required to meet job qualification</li><li>
Reliable, punctual attendance is an essential function of the position</li></ul><p></p><h4 class="jobSectionHeader"><b><br>
What will help you propel from the pack (Preferred Qualifications):</b></h4><ul><li>
Master's degree or 6 years of relevant work experience</li><li>
Bachelor&rsquo;s degree with an emphasis on airline management, aviation or industrial engineering preferred</li><li>
Quantitative and qualitative analysis preferred</li><li>
Thorough knowledge of Power BI and Microsoft Power Platform technology</li></ul></div><br>
The base pay range for this role is $102,220.00 to $133,194.00.<br>
The base salary range/hourly rate listed is dependent on job-related, factors such as experience, education, and skills. This position is also eligible for bonus and/or long-term incentive compensation awards.<br>
<br>
You may be eligible for the following competitive benefits: medical, dental, vision, life, accident &amp; disability, parental leave, employee assistance program, commuter, paid holidays, paid time off, 401(k) and flight privileges.<br>
<br>
United Airlines is an equal opportunity employer. United Airlines recruits, employs, trains, compensates and promotes regardless of race, religion, color, national origin, gender identity, sexual orientation, physical ability, age, veteran status and other protected status as required by applicable law. Equal Opportunity Employer - Minorities/Women/Veterans/Disabled/LGBT.<br>
<br>
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions. Please contact JobAccommodations@united.com to request accommodation.</div>

Manager - SOC Performance & Execution

Community College of Qatar

<div>
 <strong>
  Job Description
  <br/>
  <br/>
 </strong>
 The Senior Information Security Expert at CCQ is a strategic leader responsible for developing, implementing, and maintaining the institution&rsquo;s cybersecurity framework, ensuring compliance with Qatar&rsquo;s National Cybersecurity Strategy, PDPL, ISO 27001, NIA V2, and NIST standards. The role involves leading the Information Security Management System (ISMS), overseeing SOC operations, conducting risk assessments, managing cloud and network security architectures (AWS, Azure, GCP), and ensuring proactive threat intelligence and incident response. Additionally, the expert will drive security awareness programs, conduct phishing simulations, and provide strategic guidance on risk management. Candidates must have 15+ years of experience in cybersecurity governance, risk management, and SOC operations, with expertise in ISO 27001, NIST, and compliance frameworks. CISSP and CEH certifications are mandatory, with preferred certifications including ISO 27001 Lead Auditor, CCSP, OSCP, and CREST. This role offers a unique opportunity to tackle complex cybersecurity challenges in a higher education environment, contributing to Qatar&rsquo;s cybersecurity advancements.
 <br/>
 <br/>
 <strong>
  Arabic Job Description
  <br/>
  <br/>
 </strong>
 خبير أول في أمن المعلومات في كلية المجتمع في قطر (CCQ) هو قائد استراتيجي مسؤول عن تطوير وتنفيذ وصيانة إطار الأمن السيبراني للمؤسسة، مع ضمان الامتثال لـالاستراتيجية الوطنية للأمن السيبراني في قطر، قانون حماية الخصوصية (PDPL)، ومعايير ISO 27001 وNIA V2 وNIST. تشمل مسؤوليات الدور قيادة نظام إدارة أمن المعلومات (ISMS)، الإشراف على عمليات مركز العمليات الأمنية (SOC)، إجراء تقييمات المخاطر، إدارة بُنى الأمن السحابي والشبكي (AWS، Azure، GCP)، وضمان الاستجابة الاستباقية للتهديدات الأمنية والحوادث السيبرانية. كما يساهم في برامج التوعية الأمنية، إجراء محاكاة الهجمات الإلكترونية (Phishing Simulations)، وتقديم استشارات استراتيجية حول إدارة المخاطر. يشترط أن يكون لدى المتقدم خبرة لا تقل عن 15 عامًا في حوكمة الأمن السيبراني، إدارة المخاطر، وعمليات SOC، مع خبرة في ISO 27001 وNIST والأطر التنظيمية. تعد شهادات CISSP وCEH إلزامية، بينما يُفضل الحصول على ISO 27001 Lead Auditor، وCCSP، وOSCP، وCREST. يوفر هذا الدور فرصة متميزة لمواجهة تحديات الأمن السيبراني المعقدة في بيئة التعليم العالي، والمساهمة في تعزيز الأمن السيبراني في قطر.
 <br/>
 <br/>
 Education
 <br/>
 <br/>
 Bachelor&rsquo;s degree in an IT related field
 <br/>
 <br/>
 Easy Apply
</div>


Sr. Information Security Expert - خبير أمن معلومات أول

Blackford Technologies LLC-SPC

<div><p>The Security &amp; Detection Engineering Manager is responsible for owning and leading the detection engineering and security platform strategy across a multi-SIEM, multi-tenant MSSP environment.</p><p>
This role governs detection architecture, ATT&amp;CK coverage, platform interoperability, multi-tenant isolation, cost engineering, quality assurance and automation governance across a hybrid tooling environment.</p><b><br>
Requirements</b><p><br>
1. Detection Strategy &amp; Architecture</p><ul><li>
Define and maintain a 12&ndash;24 month Detection Engineering Roadmap.</li><li>
Own adversary-aligned detection strategy mapped to MITRE ATT&amp;CK.</li><li>
Establish detection maturity targets per platform and service tier.</li><li>
Maintain a centralised detection content abstraction model (e.g., Sigma/internal DSL).</li><li>
Govern detection lifecycle: design  validation  deployment  tuning  retirement.</li><li>
Prevent detection sprawl and duplication across platforms.</li></ul><p>
2. MITRE ATT&amp;CK Coverage Governance</p><ul><li>
Maintain formal ATT&amp;CK coverage matrix.</li><li>
Track and report coverage percentage by tactic and technique.</li><li>
Conduct quarterly coverage gap analysis.</li><li>
Validate detection coverage through simulation and adversary emulation exercises.</li><li>
Produce ATT&amp;CK coverage reporting for executive leadership and audit functions.</li></ul><p>
3. Multi-Tenant Detection Governance</p><ul><li>
Define detection inheritance and baseline models across tenants.</li><li>
Govern tenant-level tuning while preserving engineering consistency.</li><li>
Enforce strict cross-tenant rule isolation and data scoping controls.</li><li>
Maintain metadata-only forwarding controls where required for sovereignty models.</li><li>
Prevent cross-tenant configuration contamination.</li><li>
Maintain version control and tenant-level detection lineage.</li></ul><p>
4. Platform Interoperability &amp; Schema Governance</p><ul><li>
Own cross-platform detection portability strategy.</li><li>
Govern schema alignment across a multi-SIEM environment</li><li>
Define translation and normalisation pipelines.</li><li>
Ensure detection parity across supported platforms.</li><li>
Govern ingestion mapping and telemetry integrity.</li></ul><p>
5. Cost Engineering &amp; Optimisation</p><ul><li>
Own ingestion efficiency model and cost per GB governance.</li><li>
Monitor cost per alert generated.</li><li>
Optimise:</li><li>
Retention tiers (hot/warm/cold)</li><li>
Query performance</li><li>
Rule execution frequency</li><li>
Define and track detection efficiency (signal-to-noise ratio).</li><li>
Contribute to platform licensing and cost optimisation decisions.</li></ul><p>
6. Detection Quality Assurance Framework</p><ul><li>
Establish formal Detection QA process including:</li><li>
Peer review prior to deployment</li><li>
Pre-production validation environment</li><li>
False positive regression testing</li><li>
Simulation-based testing</li><li>
Implement detection health scoring system.</li><li>
Track detection decay and stale logic.</li><li>
Maintain detection change traceability.</li></ul><p>
7. Continuous Service Improvement</p><ul><li>
Establish structured SOC-to-Engineering feedback loop.</li><li>
Conduct regular analyst review sessions.</li><li>
Track false positive patterns and alert fatigue metrics.</li><li>
Maintain closed-loop improvement tracking.</li><li>
Continuously improve detection fidelity and SOC effectiveness.</li><li>
Conduct post-incident detection and control gap analysis.</li></ul><p>
8. Automation &amp; Response Engineering Governance</p><ul><li>
Govern SOAR and response automation across platforms.</li><li>
Define tiered automation model (manual / assisted / autonomous).</li><li>
Establish human-in-the-loop controls for high-risk actions.</li><li>
Enforce automation regression testing and version control.</li><li>
Monitor automation success and failure rates.</li></ul><p>
9. Preventative Control Operationalisation &amp; Validation</p><ul><li>
Implement Security Architect&ndash;approved hardening baselines (CIS-aligned).</li><li>
Operationalise secure configuration standards across:</li><li>
Endpoints</li><li>
Identity platforms</li><li>
Cloud environments</li><li>
Network security controls</li><li>
Monitor configuration drift and control degradation.</li><li>
Integrate preventative control telemetry into SIEM and detection pipelines.</li><li>
Validate control effectiveness using detection and incident data.</li><li>
Provide structured feedback to the Security Architect on control performance gaps.</li><li>
Support exposure reduction initiatives through engineering execution.</li></ul><p>
10. Compliance &amp; Audit Evidence Ownership</p><ul><li>
Maintain full audit trail for detection changes.</li><li>
Provide evidence for ISO 27001, NIST CSF and regional regulatory audits.</li><li>
Maintain detection version history.</li><li>
Ensure automated response actions are logged and traceable.</li><li>
Maintain control compliance dashboards and operational metrics.</li><li>
Provide ATT&amp;CK coverage documentation to auditors.</li></ul><p>
11. Engineering Leadership &amp; Capability Development</p><ul><li>
Define detection engineering competency framework.</li><li>
Mentor and develop Detection Engineers and SIEM Engineers.</li><li>
Establish certification roadmap (Elastic, Microsoft, Google).</li><li>
Implement technical performance scorecards.</li><li>
Develop succession planning and redundancy controls.</li><li>
Maintain backlog governance and engineering delivery cadence.</li></ul><p>
Technical Requirements</p><p>
Platform Expertise (Required)</p><ul><li>
Elastic Security (EQL, index lifecycle, ECS governance)</li><li>
Microsoft Defender XDR &amp; Sentinel (KQL, ASIM)</li></ul><p>
Platform Expertise (Desired)</p><ul><li>
Google SecOps (UDM schema, detection engineering)</li><li>
BindPlane (log routing and telemetry aggregation architecture)</li></ul><p>
Detection Engineering</p><ul><li>
Behaviour-based detection design</li><li>
Correlation engineering</li><li>
Sigma rule governance</li><li>
Detection-as-code practices</li><li>
ATT&amp;CK mapping and coverage measurement</li></ul><p>
Automation &amp; Engineering</p><ul><li>
SOAR workflow design</li><li>
Python / PowerShell scripting</li><li>
CI/CD for detection content</li><li>
API integrations (REST/JSON)</li><li>
Infrastructure-as-Code fundamentals</li></ul><p>
Preventative Control Engineering</p><ul><li>
Implement and operationalise architect-approved hardening baselines (CIS-aligned) across endpoints, identity, cloud and network environments.</li><li>
Monitor configuration drift and validate control effectiveness using telemetry integrated into SIEM platforms.</li><li>
Enforce tenant-level configuration isolation and prevent cross-tenant control contamination in multi-tenant environments.</li><li>
Translate architectural security controls into enforceable technical configurations and measurable compliance outcomes.</li><li>
Maintain automated control validation, regression testing and compliance-ready reporting for regulatory and audit purposes.</li></ul><p>
Data &amp; Schema Governance</p><ul><li>
Log normalisation and parsing</li><li>
Schema conformity validation</li><li>
Ingestion health monitoring</li><li>
Data completeness validation</li></ul><p>
Experience Requirements</p><ul><li>
7+ years in security engineering or detection engineering</li><li>
2+ years in technical leadership or management</li><li>
Experience in MSSP or multi-tenant SOC environments</li><li>
Proven experience with at least two of:</li><li>
Elastic</li><li>
Microsoft Security Suite</li><li>
Google SecOps</li><li>
Experience implementing ingestion frameworks (BindPlane or equivalent/ Native Collectors)</li></ul><p>
Key Performance Indicators
</p><p>Detection Effectiveness</p><ul><li>
ATT&amp;CK coverage percentage</li><li>
Detection fidelity score</li><li>
False positive rate</li><li>
Missed detection rate</li><li>
Detection decay rate</li></ul><p>
Operational Performance</p><ul><li>
Mean Time to Detect (MTTD)</li><li>
Mean Time to Respond (MTTR)</li><li>
Detection deployment lead time</li><li>
Detection retirement cycle time</li></ul><p>
Cost &amp; Efficiency</p><ul><li>
Cost per GB ingested</li><li>
Cost per alert generated</li><li>
Query efficiency score</li><li>
Storage optimisation ratio</li></ul><p>
Quality &amp; Governance</p><ul><li>
Detection QA pass rate</li><li>
Automation success rate</li><li>
Automation failure rate</li><li>
Schema conformity percentage</li><li>
Ingestion failure rate</li></ul><p>
Engineering Leadership</p><ul><li>
Backlog delivery velocity</li><li>
Certification completion rate</li><li>
Cross-platform detection parity percentage</li></ul></div>

Security & Detection Engineering Manager

Providence Global Center

<p></p><div><div><div><p><b>About Providence</b></p>
<p>Providence, one of the US&rsquo;s largest not-for-profit healthcare systems, is committed to high quality, compassionate healthcare for all. Driven by the belief that health is a human right and the vision, &lsquo;Health for a better world&rsquo;, Providence and its 121,000 caregivers strive to provide everyone access to affordable quality care and services.</p>
<p>Providence has a network of 51 hospitals, 1,000+ care clinics, senior services, supportive housing, and other health and educational services in the US.</p>
<p>Providence India is bringing to fruition the transformational shift of the healthcare ecosystem to Health 2.0. The India center will have focused efforts around healthcare technology and innovation, and play a vital role in driving digital transformation of health systems for improved patient outcomes and experiences, caregiver efficiency, and running the business of Providence at scale.</p><br>
<p><br>
<b>Why Us?</b></p>
<ul><li>Best In-class Benefits</li>
<li>Inclusive Leadership</li>
<li>Reimagining Healthcare</li>
<li>Competitive Pay</li>
<li>Supportive Reporting Relation</li>
</ul>
</div></div><div><div><div><div><p><b>Who are we looking for?</b></p>
<ul>
<li>Bachelor s degree in related filed, to include computer science, or equivalent combination of education and experience.</li>
<li>15+ years of relevant post-qualification experience, with at least eight (8) years in a leadership role in Security Operations Center environment (SOC)</li>
<li>Hands on experience or exposure to SIEM tools &ndash; Sentinel (preferred)</li>
<li>Experience in SOAR (Security Orchestration Automation Response) platform (Demisto preferred) &amp; Endpoint Detection &amp; Response (Crowd strike preferred)</li>
<li>Knowledge of advanced cyber threats, adversary methodologies, and cyber threat intelligence.</li>
<li>Should have worked on security monitoring in Cloud environment (Azure, Google Cloud etc.)/ relevant knowledge in Cloud environment.</li>
<li>Preferred SSCP, EC-Council CSA, CompTIA- CYSA+, SANS GCIH /GMON /GSOC/CISM/CISSP certification.</li>
<li>Technical leadership skills in security operations, threat intelligence and event analysis, incident response, email analysis, threat hunting, EDR etc.
</li></ul></div></div></div></div><div><div><p>Providence&rsquo;s vision to create &lsquo;Health for a Better World&rsquo; aids us to provide a fair and equitable workplace for all in our employment, whether temporary, part-time or full time, and to promote individuality and diversity of thought and background, and acknowledge its role in the organization&rsquo;s success. This makes us committed towards equal employment opportunities, regardless of race, religion or belief, color, ancestry, disability, marital status, gender, sexual orientation, age, nationality, ethnic origin, pregnancy, or related needs, mental or sensory disability, HIV Status, or any other category protected by applicable law. In furtherance to our mission in building a more inclusive and equitable environment, we shall, from time to time, undertake programs to assist, uplift and empower underrepresented groups including but not limited to Women, PWD (Persons with Disabilities), LGTBQ+ (Lesbian, Gay, Transgender, Bisexual or Queer), Veterans and others. We strive to address all forms of discrimination or harassment and provide a safe and confidential process to report any misconduct.</p>
<p>Contact our Integrity hotline also, read our Code of Conduct.</p></div></div></div><p></p>

Senior Manager Security Operations

SafeAeon

<div><p><b>JD for SOC Analyst:</b></p><p><b>
What is a SOC analyst?
</b></p><p>SOC analysts can be understood as the first point of contact to any incident/threat in basic terms. SOC stands for Security Operations Center, and it consists of multiple analysts who work 24x7 rotational shifts to fight against threats that could harm an organization. A SOC analyst generally is responsible for assessing the endpoints and look for vulnerabilities using various tools and technologies. However, the role of a SOC analyst is not limited to this:</p><p>
<b>SOC Analyst Job Duties and Responsibilities:</b></p><ul><li>Evaluate critical security incidents using detection tools</li></ul><p>
. &bull; Investigate event alerts and logs from multiple endpoints.</p><ul><li>Analyze and co-relate logs from the firewall, IDS/IPS, AVs, O365, etc</li></ul><p>
. &bull; Work in a 24x7 pro-active environment and respond to security alerts.
</p><ul><li>Document and report incidents/offenses to the clients</li></ul><p>
. &bull; Use Endpoint detection tools to detect malware across the client&rsquo;s environment.</p><ul><li>Maintain and send monthly, weekly reports and other client-specific documentation.</li><li>Work on industry standard SIEM solutions to analyze incidents and create complex indexed searches.</li><li>Using analytical skills to whitelist False Positives incidents.
</li></ul><p>&bull; Keep yourself updated on security news/vulnerabilities and compose a set of Use Cases. &bull; Use basic scripting knowledge to automate processes.</p><ul><li>Onboarding new clients from scratch and configuring their network environment</li></ul><p>
. &bull; Identifying compromised Endpoints by analyzing payloads/logs and notifying clients</p><p>
. &bull; Work on latest security technologies, including Email filtering, Compliance and Patch management, Syslog management, MDR, and SIEM.</p><h2 class="jobSectionHeader"><b>
Qualifications</b></h2><ul><li><p>
Bachelor' degree in technical background.</p></li></ul><p></p><h2 class="jobSectionHeader"><b>
Additional Information</b></h2><p>
Candidates can apply to recruitment@safeaeon.com</p></div>

SOC Analyst Intern

Search 10000+ Soc manager jobs near you this March. New roles added regularly across leading industries. Apply today.