soc manager

Openkyber

<div><p><b>Role Overview,</b> The SOC Lead / Incident Manager will oversee 24x7x365 Security Operations Center (SOC) functions for the Congressional Budget Office vSOC program. This role requires strong leadership in incident response, SLA enforcement, and team management, with hands-on expertise in Microsoft Sentinel and Defender environments. The SOC Lead will serve as the escalation authority, ensuring operational excellence, audit readiness, and compliance with federal frameworks such as NIST SP 800-53 and FISMA .</p>
<p><b>Key Responsibilities</b></p>
<ul><li>Lead Tier I/II/III SOC operations with full escalation authority.</li>
<li>Enforce SLA-driven performance standards ( 15 min triage, 1 hr investigation, 2 hr escalation).</li>
<li>Oversee the incident lifecycle from triage through investigation, response, and closure.</li>
<li>Act as incident commander during high-severity events, coordinating stakeholder communication.</li>
<li>Review and approve incident classifications, escalations, and remediation actions.</li>
<li>Conduct daily/weekly operational reviews, tracking incident trends and performance metrics.</li>
<li>Collaborate with engineering teams to improve detection rules and reduce false positives.</li>
<li>Ensure all incidents are documented and audit-ready for compliance assessments.</li>
</ul><p><b>Required Skills &amp; Qualifications</b></p>
<ul><li>8 10+ years of experience in SOC operations and incident management .</li>
<li>Strong expertise in Microsoft Sentinel, Defender XDR , and SIEM/SOAR platforms (Splunk, QRadar, ELK).</li>
<li>Proven ability to lead cross-functional SOC teams and enforce SLA compliance.</li>
<li>Hands-on experience with ServiceNow, Jira, Power BI, KQL, and Log Analytics .</li>
<li>Deep knowledge of NIST SP 800-53, NIST 800-61, FISMA, and FedRAMP frameworks.</li>
<li>Certifications (Preferred / Mandatory) CISSP (Certified Information Systems Security Professional) GIAC (GCIH / GCIA / GCFA) Microsoft Certified: Security Operations Analyst (SC-200) ITIL / PMP (optional but valuable for governance)</li>
</ul><p>PALNAR, the trade name of Palayekar Companies Inc. founded in 1997, delivers global software and technology services. Headquartered in Cranbury, New Jersey - United States, with operations in India (Noida and Goa), OpenKyber provides software consulting, development, IT Support service and ongoing technology support worldwide.</p>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

SOC Manager

<div><b>Job id:</b> 801624<br>
<b>SOC Analyst- Endpoint Detection &amp; Response</b><br>
<b>Client:</b> IA DOM DOIT<br>
<b>Location:</b> Remote, Des Moines, IA<br>
<b>Duration:</b>
<p>Job Description: The State of Iowa is seeking an experienced Security Operations Center (SOC) Analyst with strong expertise in Endpoint Detection and Response (EDR) tools and cyber-security incident handling.</p>
<p>Position Summary: The State of Iowa is seeking an experienced Security Operations Center (SOC) Analyst with strong expertise in Endpoint Detection and Response (EDR) tools and cyber-security incident handling. The ideal candidate will thrive in a fast-paced environment with aggressive timelines and will be responsible for monitoring, analyzing, and responding to events and alerts supporting statewide IT systems. This is a remote position.</p>
<b>Required Experience:</b>
<p>3 Hands-on experience working with Endpoint Detection and Response (EDR) tools Experience responding to, and analyzing, cyber-security events and incidents Experience working with Crowdstrike, or comparable EDR tool Ability to work in high-pressure, fast-paced environments Experience working with CrowdStrike or comparable EDR tool</p>
<b>Responsibilities:</b>
<ul><li>Provide security monitoring and response efforts for, and in coordination with, the Security Operations Center (SOC)</li>
<li>Lead outreach and coordination with statewide partners, including County, Municipal, and educational entities</li>
<li>Strong communication, reporting, and documentation abilities Monitor, analyze, and respond to cyber-security events, alerts, and incidents affecting State of Iowa IT systems</li>
<li>Take appropriate actions to protect IT assets from potential incidents and threats</li>
<li>Document and report changes, trends, and implications related to evolving cyber-security tools, systems, and solutions</li>
<li>Follow SOC processes and assist ISD Security Engineers and OCIO support teams during alerts, events, and incidents</li>
<li>Submit new events and update existing events within the SOC ticketing system</li>
<li>Provide phone and email support to state agencies and participating partners during alerts, events, and incidents</li>
<li>Provide off-hours or ad-hoc shift support as required Proven ability to collaborate effectively with partners across varying technical backgrounds</li>
<li>Capability to perform Tier 1 troubleshooting, including log collection, documentation review, and appropriate escalation</li>
<li>Maintain up-to-date knowledge on relevant cyber-security technologies and tools</li>
<li>Support Tier 1 SOC Analysts in triaging cyber-security events, alerts, and incidents</li>
<li>Follow detailed operational procedures to analyze, escalate, and support remediation of critical security incidents</li>
<li>Assist with SOC metrics, reporting, and communications</li>
<li>Support incident response activities up to the preliminary forensics stage</li>
<li>Monitor EDR tools and perform initial assessment and data gathering for alerts</li>
</ul><p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

CareCloud

<div></div><div><div>Department: INFORMATION SECURITY Experience: 8 YearsDeadline: May 31, 2026Location: BAGH, Pakistan</div><div><h4 class="jobSectionHeader"><b>
Job Profile</b></h4><p></p><div><p><b>
Role Description:</b></p>
<p>We are seeking an experienced Cyber Security Manager to lead CareCloud&rsquo;s Security Operations Center (SOC) at the Bagh AJK office. The SOC Manager will be responsible for ensuring effective monitoring, detection, response, and remediation of cybersecurity threats. The ideal candidate will have strong expertise in penetration testing, ethical hacking, incident response, and managing SOC operations.</p>
<p><b>Key Responsibilities:</b></p>
<ul><li>Lead and manage SOC operations to ensure high performance and continuous improvement.</li>
<li>Oversee daily security monitoring, threat detection, and incident response activities.</li>
<li>Conduct and supervise penetration testing and ethical hacking exercises to identify vulnerabilities and recommend mitigation strategies.</li>
<li>Develop, implement, and maintain SOC processes, workflows, and documentation.</li>
<li>Coordinate with IT, network, and application teams to ensure security compliance and timely resolution of incidents.</li>
<li>Track and report key security metrics, incidents, and performance of SOC operations to leadership.</li>
<li>Manage escalation processes and ensure timely response to critical security events.</li>
<li>Stay updated with the latest cybersecurity threats, tools, and best practices.</li>
<li>Provide training, mentoring, and knowledge sharing within the SOC team.</li>
<li>Participate in risk assessments, audits, and compliance activities as required.</li>
</ul>
</div><p></p><div><h4 class="jobSectionHeader"><b>Tools / Skills</b></h4><p></p><div><p><b>
Experience:</b></p>
<ul><li>8 years plus of experience in cybersecurity, with at least 3&ndash;5 years in SOC leadership or management.</li>
<li>Hands-on experience in penetration testing, ethical hacking, vulnerability management, and incident response.</li>
<li>Experience managing SOC operations.</li>
<li>Strong knowledge of security monitoring tools (SIEM, IDS/IPS, endpoint protection, firewalls, etc.)</li>
</ul>
<p><b>Skills:</b></p>
<ul><li>In-depth understanding of cybersecurity frameworks (NIST, ISO 27001, MITRE ATT&amp;CK).</li>
<li>Strong analytical, problem-solving, and decision-making abilities.</li>
<li>Excellent communication and leadership skills.</li>
<li>Ability to work under pressure and respond to security incidents promptly.</li>
</ul>
<p><b>Qualifications:</b></p>
<ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field.</li>
<li>Relevant certifications preferred: CISSP, CISM, CEH, OSCP, or GIAC.</li></ul></div></div></div></div><p></p>
<br><div><h5 class="jobSectionHeader"><b>Additional Information</b></h5><div><div><p><b>
Total Position(s)
</b></p><p>1 Positions</p></div><div><p><b>
Gender</b></p><p>
Does not matter</p></div><div><p><b>
Minimum Education</b></p><p>
Bachelors Degree</p></div><div><p><b>
Degree Title</b></p><p>
Bachelors Degree</p></div><div><p><b>
Shift</b></p><p>
Evening</p></div><div><p><b>
Nature of Job</b></p><p>
Work From Office</p></div></div></div>

Manager Cyber Security

ABIS

<div><p>We are seeking a highly experienced Cybersecurity Security Operations Center (SOC) Lead to join our team. The SOC Lead will be responsible for leading and managing the day-to-day operations and ensuring the organization's security posture is maintained.</p><p><b>
Key Responsibilities:</b></p><ul><li>Leading a team of ITHRA SOC analysts and engineers in the detection, investigation, and response to security incidents</li><li>Lead and develop a well-trained ITHRA SOC Team with core competencies necessary to detect, investigate, response, manage risk, stay ahead of security threats or position team to effectively mitigate risk</li><li>Monitoring, analyzing, and detecting security events and incidents</li><li>Analyze and evaluate network, system, and security alerts performing triage to include determining scope, urgency and potential impact, identifying the specific vulnerability</li><li>Actively participate in decision making with leadership and seek to understand the broader impact of current decisions</li><li>Developing, implementing, and maintaining security policies, procedures, and standards</li><li>Overseeing the use of security tools and technologies, including SIEM, IDS/IPS, and firewalls</li><li>Collaborating with other teams to develop and implement incident response plans</li><li>Communicating with senior management and stakeholders regarding security incidents and remediation efforts</li><li>Keeping abreast of new security threats and technologies and incorporating them into the organization's security posture</li><li>Establish and maintain training plans and conduct ongoing training of ITHRA SOC staff</li><li>Providing guidance and mentorship to the ITHRA SOC team members</li></ul><b><br>
Requirements</b><ul><li><br>
Bachelor's degree in Computer Science, Cybersecurity or a related field</li><li>Certification by one of these organizations (SANS, Offensive Security, eLearn Security)</li><li>Minimum of 5 years of experience in the information security field, SOC lead or management role</li><li>Well versed with Security operations, Intrusion detection and incident handling</li><li>Security monitoring experience with one or more SIEM technologies
</li><li>Knowledge of current and emerging technologies and processes used within a SOC to improve efficiency and effectiveness.</li><li>Strong communication, writing and interpersonal skills. Strong leadership skills with the ability with the ability to prioritize and execute in a methodical and disciplined manner, as well as to set and manage expectations with stakeholders and team members.</li><li>Strong understanding of security threats and technologies</li><li>Experience with network and host-based security tools</li><li>Experience with incident response procedures and regulations</li><li>Strong analytical and problem-solving skills</li><li>Strong communication and leadership skills</li><li>Strong leadership and team management skills</li></ul></div>

Cybersecurity Analyst - SMP Saudi Aramco

البنك التجاري الدولي

<div></div><div><div>Description<div></div><p><br>
JOB PURPOSE</p>
<p>
To oversee and manage the Security Operations Center (SOC) related activities including, threat monitoring, triage and response to develop detailed root cause analysis and escalate for emergency response as per the approved process.</p><br>
<p>
</p><p>Description</p>
<p>
Security Incident Response Management</p>
<p>
1. Provide management oversight for the identification, triage and response of events or incidents of apparent security breaches to maintain the security posture.
</p><p>2. Conduct Security event analysis reporting on activities through regular scheduled reporting and communications in order to highlight the main incidents and events.
</p><p>3. Identify and handle incidents, which need special attention or escalation to secure the overall bank&rsquo;s security and mitigate potential risks.
</p><p>4. Direct the creation and maintenance of incident response run books of the Analysts team run-books.</p>
<p>
5. Act as a lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response to facilitate the investigation and root cause analysis.</p>
<p>
6. Ensure proper reporting for daily, monthly, quarterly and annual security posture, SOC and executive reporting and dashboards.</p>
<p>
7. Recommend security solutions based on security postures and gaps identified.</p>
<p>
8. Manage communication with other departments to facilitate investigation process.</p>
<p>
9. Develop and update SLA between SOC and other departments when required and maintain SLA.</p>
<p>
Strategy</p>
<p>
10. Participate in the formulation and implementation of the Security Operations Center Department strategy to ensure the alignment with CIB strategy</p>
<p>
Policies, Processes and Procedures</p>
<p>
11. Participate and recommend improvements to policies, processes and procedures and manage their implementation to ensure all relevant procedural/legislative requirements are carried out.</p>
<p>
Day-to-day Management</p>
<p>
12. Supervise the day to day operations of the Incident Management &amp; Response team providing some guidance in the related area, encouraging teamwork and facilitating related professional work processes in order to achieve high performance standards</p>
<p>
Supervision</p>
<p>
13. Supervise the activities and work of subordinates to ensure that all work within a specific area is carried out in an efficient manner and in compliance with the set policies, processes and procedures</p>
<p>
Compliance</p>
<p>
14. Ensure compliance with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB&rsquo;s sound legal position and mitigate any potential risks</p><div><br>
</div></div><div>
Qualifications<div></div><p><br>
Qualifications &amp; Experience</p>
<ul><li> Bachelor&rsquo;s degree of Engineering, Computer Science or equivalent</li></ul>
<ul><li> Minimum 8 - 10 years of experience in IT Security or related fields</li></ul>
<ul><li> Strong understanding of incident handling procedures
</li></ul><ul><li> Experience with packet and log analysis using commercial and open source tools</li></ul>
<ul><li> Recommended Certifications:</li></ul>
<p>
o Certified Information Systems Security Professional (CISSP)</p>
<p>
o Certified Information Security Manager (CISM)</p>
<ul><li> Mandatory Certification:</li></ul>
<p>
o GIAC Certified Incident Handling (GCIH)</p><br>
<p></p>
<p>
Skills</p>
<ul><li> Very good command of English and Arabic language</li></ul>
<ul><li> Very good Analytical skills</li></ul>
<ul><li> Very good Communication skills</li></ul>
<p>
Very good MS Office skills<br>
</p><div>
</div></div><div>Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 2</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

SECURITY INCIDENT RESPONSE MANAGER

Marriott Vacations Worldwide

<div><ul><li><b>Relocation assistance provided</b></li></ul><p><b><br>
Job </b><b>Summary</b></p><p></p><p>
The <b>AVP, Cyber Security Operations</b> will be responsible for leading the design, implementation, and continuous enhancement of the organization&rsquo;s security operations capabilities. This role will focus on developing a Security Operations Center (SOC) that ensures proactive monitoring, threat detection, and swift incident response to safeguard the organization&rsquo;s critical infrastructure and digital assets. The individual will be tasked with establishing a robust threat intelligence program that integrates real-time threat data, analysis, and strategic insights to anticipate emerging risks and inform decision-making. A key aspect of this role is creating and nurturing operational processes that allow the SOC to function seamlessly across complex, hybrid environments, including cloud and on-premises systems.</p><p></p><p>
This leader will be responsible for managing advanced security tools such as SIEM, SOAR, EDR, and threat intelligence platforms, and will leverage these tools to automate workflows, improve incident response times, and drive threat analysis. The role will ensure that security operations are continuously evolving to meet the latest threat landscapes, using an intelligence-driven approach to preemptively mitigate risks. The individual will be instrumental in driving the organization&rsquo;s security incident management framework, ensuring effective resolution, reporting, and post-incident reviews that contribute to future risk mitigation.</p><p></p><p>
Additionally, the position collaborates closely with business and IT leaders to ensure that security operations are aligned with organizational goals and risk management strategies. This role will also involve working with regulatory and compliance teams to ensure adherence to industry standards, data protection regulations, and cybersecurity best practices.</p><p></p><p><b>
Expected </b><b>Contributions</b></p><p></p><ul><li><b>
SOC Leadership and Optimization: </b>Leads the continuous improvement and optimization of the Security Operations Center (SOC) to ensure that it is capable of effectively detecting and responding to both external and internal threats. This includes refining SOC processes, tools, and workflows to ensure operational efficiency and responsiveness to security incidents across hybrid environments.</li><li><b>
Threat Intelligence Integration:</b> Develops and operationalizes a comprehensive threat intelligence program that enhances situational awareness and empowers the SOC with actionable insights. This includes integrating external threat intelligence feeds, leveraging internal threat data, and fostering collaboration with industry groups and threat-sharing communities to stay ahead of emerging threats.</li><li><b>
Incident Response Management:</b> Oversees the development and execution of incident response plans, ensuring they are tested, documented, and continuously improved. Leads high-impact incident response efforts, coordinating with relevant stakeholders to contain, remediate, and recover from security incidents. Ensures post-incident reviews are conducted to identify gaps and improve the organization&rsquo;s overall security posture.</li><li><b>
Security Automation and Orchestration:</b> Spearheads the integration of automation and orchestration tools, such as Security Orchestration, Automation, and Response (SOAR) platforms, to streamline and accelerate security operations. Focuses on automating repetitive tasks, improving response times, and reducing manual effort to increase operational efficiency within the SOC.</li><li><b>
Security Metrics and Reporting:</b> Establishes key performance indicators (KPIs) and metrics to measure the effectiveness of the security operations function. Provides regular updates and executive reporting on security operations performance, including threat detection, incident response timelines, and overall security posture. Uses data to drive improvements and ensure alignment with the organization&rsquo;s risk management strategy.</li><li><b>
Cross-functional Collaboration:</b> Works closely with technology, legal, compliance, privacy, and business leadership to ensure that security operations are aligned with overall business objectives and regulatory requirements. Facilitates the integration of security considerations into all aspects of the organization&rsquo;s technology infrastructure and processes.</li><li><b>
Team Development and Mentorship:</b> Fosters a high-performance culture within the security operations team through mentorship, training, and leadership. Supports career development and skills growth for team members, ensuring they are equipped with the latest knowledge and tools to handle evolving threats. Builds a culture of continuous learning to keep the team ahead of the curve in security operations and threat management.</li><li><b>
Risk and Compliance Alignment:</b> Ensures that the security operations function meets relevant regulatory requirements and aligns with industry standards (e.g., NIST, ISO 27001, GDPR). Works with compliance and legal teams to ensure that incident response efforts, threat intelligence, and SOC activities support the organization&rsquo;s broader compliance goals.</li><li><b>
Technology and Tool Selection:</b> Evaluates, selects, and implements security technologies that support the security operations program. This includes SIEM, EDR, threat intelligence platforms, and other tools that enhance detection, monitoring, and response capabilities. Ensures these tools are integrated seamlessly into the organization&rsquo;s broader security architecture.</li></ul><p></p><p><b>
Candidate </b><b>Profile</b></p><p></p><p><b>
Education</b></p><ul><li>
Bachelor of Science (BS) degree that is technology based in information technology, engineering, computer science, or statistical/math sciences required.
</li><li>Master&rsquo;s degree, e.g., MBA or in Computer Science, preferred.</li></ul><p></p><p><b>
Certifications Preferred</b></p><ul><li>
Advanced certifications such as CISSP, CISM, GIAC (e.g., GCIA, GCFA, GCIH), or CEH preferred.</li></ul><p></p><p><b>
Experience</b></p><ul><li>
At least ten years of progressive experience in relevant Information Security positions.</li><li>
At least six years of experience in a security engineering role or a similar position or having equivalent skills and experience
</li><li>Proven experience managing hybrid SOCs (in-house and MSSPs), and leading global or enterprise-scale security operations.</li><li>
Demonstrated expertise with tools and technologies such as SIEM, SOAR, EDR, and threat intelligence platforms.</li><li>
Experience managing incidents and crises in dynamic environments.</li></ul><p></p><p><b>
Skills/Attributes</b></p><ul><li>
Deep understanding of incident response methodologies, threat detection, and forensics practices.</li><li>
Expertise in modern IT architectures, including hybrid cloud environments, containers, and APIs.</li><li>
Strong knowledge of security frameworks and standards (e.g., NIST CSF, MITRE ATT&amp;CK, ISO 27001).</li><li>
Exceptional analytical and critical thinking skills with the ability to make critical decisions under pressure.</li><li>
Strong leadership, collaboration, and interpersonal skills, with the ability to influence at all levels of the organization.</li><li>
Effective communicator with the ability to translate complex technical details into actionable insights for diverse audiences.</li><li>
Ability to develop and mentor security operations teams, fostering a culture of continuous learning, skill development, and high-performance standards to stay ahead of evolving threats.</li></ul><p></p><p>
Marriott Vacations Worldwide is an equal opportunity employer committed to hiring a diverse workforce and sustaining an inclusive culture.</p></div>

AVP, Cyber Security Operations*

<div>
 <ul>
  <li>
   Relocation assistance provided
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Job Summary
  <br/>
  <br/>
 </strong>
 The
 <strong>
  AVP, Cyber Security Operations
 </strong>
 will be responsible for leading the design, implementation, and continuous enhancement of the organization&rsquo;s security operations capabilities. This role will focus on developing a Security Operations Center (SOC) that ensures proactive monitoring, threat detection, and swift incident response to safeguard the organization&rsquo;s critical infrastructure and digital assets. The individual will be tasked with establishing a robust threat intelligence program that integrates real-time threat data, analysis, and strategic insights to anticipate emerging risks and inform decision-making. A key aspect of this role is creating and nurturing operational processes that allow the SOC to function seamlessly across complex, hybrid environments, including cloud and on-premises systems.
 <br/>
 <br/>
 This leader will be responsible for managing advanced security tools such as SIEM, SOAR, EDR, and threat intelligence platforms, and will leverage these tools to automate workflows, improve incident response times, and drive threat analysis. The role will ensure that security operations are continuously evolving to meet the latest threat landscapes, using an intelligence-driven approach to preemptively mitigate risks. The individual will be instrumental in driving the organization&rsquo;s security incident management framework, ensuring effective resolution, reporting, and post-incident reviews that contribute to future risk mitigation.
 <br/>
 <br/>
 Additionally, the position collaborates closely with business and IT leaders to ensure that security operations are aligned with organizational goals and risk management strategies. This role will also involve working with regulatory and compliance teams to ensure adherence to industry standards, data protection regulations, and cybersecurity best practices.
 <br/>
 <br/>
 <strong>
  Expected Contributions
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   SOC Leadership and Optimization: Leads the continuous improvement and optimization of the Security Operations Center (SOC) to ensure that it is capable of effectively detecting and responding to both external and internal threats. This includes refining SOC processes, tools, and workflows to ensure operational efficiency and responsiveness to security incidents across hybrid environments.
  </li>
  <li>
   Threat Intelligence Integration: Develops and operationalizes a comprehensive threat intelligence program that enhances situational awareness and empowers the SOC with actionable insights. This includes integrating external threat intelligence feeds, leveraging internal threat data, and fostering collaboration with industry groups and threat-sharing communities to stay ahead of emerging threats.
  </li>
  <li>
   Incident Response Management: Oversees the development and execution of incident response plans, ensuring they are tested, documented, and continuously improved. Leads high-impact incident response efforts, coordinating with relevant stakeholders to contain, remediate, and recover from security incidents. Ensures post-incident reviews are conducted to identify gaps and improve the organization&rsquo;s overall security posture.
  </li>
  <li>
   Security Automation and Orchestration: Spearheads the integration of automation and orchestration tools, such as Security Orchestration, Automation, and Response (SOAR) platforms, to streamline and accelerate security operations. Focuses on automating repetitive tasks, improving response times, and reducing manual effort to increase operational efficiency within the SOC.
  </li>
  <li>
   Security Metrics and Reporting: Establishes key performance indicators (KPIs) and metrics to measure the effectiveness of the security operations function. Provides regular updates and executive reporting on security operations performance, including threat detection, incident response timelines, and overall security posture. Uses data to drive improvements and ensure alignment with the organization&rsquo;s risk management strategy.
  </li>
  <li>
   Cross-functional Collaboration: Works closely with technology, legal, compliance, privacy, and business leadership to ensure that security operations are aligned with overall business objectives and regulatory requirements. Facilitates the integration of security considerations into all aspects of the organization&rsquo;s technology infrastructure and processes.
  </li>
  <li>
   Team Development and Mentorship: Fosters a high-performance culture within the security operations team through mentorship, training, and leadership. Supports career development and skills growth for team members, ensuring they are equipped with the latest knowledge and tools to handle evolving threats. Builds a culture of continuous learning to keep the team ahead of the curve in security operations and threat management.
  </li>
  <li>
   Risk and Compliance Alignment: Ensures that the security operations function meets relevant regulatory requirements and aligns with industry standards (e.g., NIST, ISO 27001, GDPR). Works with compliance and legal teams to ensure that incident response efforts, threat intelligence, and SOC activities support the organization&rsquo;s broader compliance goals.
  </li>
  <li>
   Technology and Tool Selection: Evaluates, selects, and implements security technologies that support the security operations program. This includes SIEM, EDR, threat intelligence platforms, and other tools that enhance detection, monitoring, and response capabilities. Ensures these tools are integrated seamlessly into the organization&rsquo;s broader security architecture.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Candidate Profile
  <br/>
  <br/>
 </strong>
 <strong>
  Education
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor of Science (BS) degree that is technology based in information technology, engineering, computer science, or statistical/math sciences required.
  </li>
  <li>
   Master&rsquo;s degree, e.g., MBA or in Computer Science, preferred.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Certifications Preferred
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Advanced certifications such as CISSP, CISM, GIAC (e.g., GCIA, GCFA, GCIH), or CEH preferred.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Experience
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   At least ten years of progressive experience in relevant Information Security positions.
  </li>
  <li>
   At least six years of experience in a security engineering role or a similar position or having equivalent skills and experience
  </li>
  <li>
   Proven experience managing hybrid SOCs (in-house and MSSPs), and leading global or enterprise-scale security operations.
  </li>
  <li>
   Demonstrated expertise with tools and technologies such as SIEM, SOAR, EDR, and threat intelligence platforms.
  </li>
  <li>
   Experience managing incidents and crises in dynamic environments.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Skills/Attributes
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Deep understanding of incident response methodologies, threat detection, and forensics practices.
  </li>
  <li>
   Expertise in modern IT architectures, including hybrid cloud environments, containers, and APIs.
  </li>
  <li>
   Strong knowledge of security frameworks and standards (e.g., NIST CSF, MITRE ATT&amp;CK, ISO 27001).
  </li>
  <li>
   Exceptional analytical and critical thinking skills with the ability to make critical decisions under pressure.
  </li>
  <li>
   Strong leadership, collaboration, and interpersonal skills, with the ability to influence at all levels of the organization.
  </li>
  <li>
   Effective communicator with the ability to translate complex technical details into actionable insights for diverse audiences.
  </li>
  <li>
   Ability to develop and mentor security operations teams, fostering a culture of continuous learning, skill development, and high-performance standards to stay ahead of evolving threats.
   <br/>
   <br/>
  </li>
 </ul>
 Marriott Vacations Worldwide is an equal opportunity employer committed to hiring a diverse workforce and sustaining an inclusive culture.
</div>


Search 10000+ Soc manager jobs near you this May. New roles added regularly across leading industries. Apply today.

10000 soc manager jobs Near Me

SOC Manager

SOC Manager

Manager Cyber Security

Cybersecurity Analyst - SMP Saudi Aramco

SECURITY INCIDENT RESPONSE MANAGER

AVP, Cyber Security Operations*

AVP, Cyber Security Operations*