B

BlueVoyant

Cloud-native cyber defense with threat monitoring

Manager Security Operations Center - SOC

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeCollege Park, MD, USANo salary listed

About the Job

Requirements

  • Ability and willingness to commute to the College Park, Maryland office two to three days per week.
  • Experience working within a global organization and partnering with distributed teams across multiple regions and time zones.
  • Prior experience managing managers or team leads, with direct accountability for team performance and development.
  • Ability to handle high-pressure situations productively and professionally.
  • Ability to work directly with customers to understand security-service requirements and feedback, including managing escalations to protect client relationships.
  • Advanced written and verbal communication skills, including the ability to explain complex technical topics clearly.
  • Strong teamwork and interpersonal skills, including effectiveness with a globally distributed team.
  • Ability and willingness to work in a 24/7/365 environment.
  • Knowledge of and experience with the Microsoft Security Stack, including Defender and Sentinel.
  • Knowledge of and experience with intrusion detection and prevention systems and SIEM software.
  • Advanced knowledge and understanding of network protocols and devices.
  • Advanced experience with Mac OS, Windows, and Unix systems.
  • Ability to analyze event logs and recognize signs of cyber intrusions and attacks.
  • Strong knowledge of SIEM, packet analysis, SSL decryption, malware detection, HIDS/NIDS, network monitoring tools, case management systems, knowledge bases, web security gateways, email security, data loss prevention, antivirus, network access control, encryption, and vulnerability identification.

Responsibilities

  • Lead, develop, and manage a team of team leads, trainers, and security analysts, providing strategic direction, coaching, and performance management.
  • Ensure all SOC customers receive high-quality service, with full responsibility and accountability for customer outcomes.
  • Manage customer escalations with the goal of client retention, partnering with Client Success on remediation plans and customer communication.
  • Oversee team leads and the wider analyst team to ensure consistent quality and performance across the SOC.
  • Lead post-incident review meetings to capture lessons learned after critical events are resolved.
  • Ensure security operations actions account for customer impact by engaging stakeholders and communicating known or suspected implications of technical decisions.
  • Validate that security operations activities address customer requirements across all MSS services.
  • Oversee operations to deter, identify, monitor, investigate, and analyze network intrusions.
  • Supervise complex event investigations and incident declarations, ensuring events are identified, analyzed, and escalated appropriately.
  • Ensure incident investigation, handling, response, and documentation meet quality and SLA standards.
  • Advance security policies, procedures, and automation.
  • Develop incident-response reporting and policy updates as needed.
  • Partner with Client Success, Content Engineering, Threat Hunt, and Product leadership to improve services and represent SOC priorities.
  • Develop and maintain SOC performance metrics and report regularly to leadership on team performance, incident trends, and customer outcomes.
  • Communicate regularly with customer IT teams about issues, remediation, and maintaining business as usual.
  • Maintain awareness of the current threat landscape.

Desired Qualifications

  • Experience partnering with or managing teams based in the Philippines.
  • Experience in network or host vulnerability analysis, intrusion analysis, digital forensics, penetration testing, or related areas.
  • Eight or more years of hands-on SOC, TOC, or NOC experience.
  • Certifications such as GCIA, GCIH, GCFA, GCFE, CISSP, Security+, Network+, CEH, RHCA, RHCE, MCSA, MCP, or MCSE.
  • Familiarity with IDA Pro, PEiD, PEview, Procmon, Snort, Bro, Kali Linux, Metasploit, NMAP, and Nessus.
  • Familiarity with GPO, Landesk, or other IT infrastructure tools.
  • Understanding of or experience with one or more programming languages: .NET, PHP, Perl, Python, Java, Ruby, C, or C++.
  • A bachelor's degree in Information Security, Computer Science, or another technology- or engineering-related field is preferred; candidates with proven security or network operations experience will also be considered.

About the Company

BlueVoyant

Cloud-native cyber defense with threat monitoring

BlueVoyant provides cloud-native cyber defense by combining internal and external security operations into a single platform that continuously monitors networks, endpoints, and the digital attack surface. It focuses on supply chain security by using machine-learning automation plus human expertise to identify and mitigate threats across complex vendor ecosystems, tracking external signals like domains, websites, social media, and applications. The company also offers services tuned for Microsoft Security tools, delivering enterprise-grade threat analytics to strengthen defenses. Its goal is to help organizations reduce digital risk and prevent cyber threats through continuous monitoring, threat intelligence, and coordinated incident response across on-premises and cloud environments.

Company size
501-1,000
Company stage
Series E
Total funding
$695.5M
Headquarters
New York City, New York
Founded
2017

Recently Posted Jobs

Explore more opportunities at BlueVoyant

See more jobs