AI Autonomous SOC Cybersecurity Account Manager
Position: AI Autonomous SOC Cybersecurity Account Manager
Role & Responsibilities
As an AI Autonomous SOC Cybersecurity Account Manager, you will own the cybersecurity service experience for assigned customers — combining customer engagement, SOC operations, detection engineering, security automation, and service delivery within an AI-enabled SOC environment.
This is a hands-on, customer-facing cybersecurity role where you will work directly with customers and technical teams to continuously improve detection, automation, response, reporting, and overall security outcomes.
Customer & Cybersecurity Service Ownership
Serve as the primary cybersecurity account lead and main point of contact for assigned customers.
Build trusted relationships with customer stakeholders across security, IT, infrastructure, compliance, and management.
Maintain visibility of customer health, service status, open issues, improvement actions, and platform adoption.
Lead weekly, monthly, and quarterly cybersecurity service engagements, including threat activity discussions, trend analysis, service reviews, and action planning.
Translate SOC findings, incidents, threats, and technical observations into clear operational and business risk insights.
Understand customer priorities, environment changes, and security requirements and turn them into actionable service improvements.
Detection Engineering & Optimization
Define, refine, tune, and optimize detection rules for assigned customer environments.
Review alert quality, false positives, detection gaps, and detection use-case performance to continuously improve accuracy and relevance.
Support onboarding and tuning of log sources, data sources, and customer-specific detection requirements.
Work closely with SOC and Detection Engineering teams to continuously improve detection coverage and effectiveness.
Security Automation & Response Playbooks
Customize automation policies, investigation workflows, and response playbooks according to each customer's operating model and escalation requirements.
Ensure automation logic aligns with customer approvals, service scope, and response governance.
Continuously refine automation to reduce manual effort, accelerate investigation and response, and improve service consistency.
Dashboards, Reporting & Security Insights
Fine-tune dashboards for operational, technical, and management audiences.
Create and maintain weekly, monthly, and quarterly report templates that provide relevant and actionable security insights.
Present incidents, threat trends, security posture observations, SLA performance, and recommendations to customers.
Drive customer adoption of available SOC, MXDR, automation, and AI-driven security capabilities.
Incident Escalation & Service Delivery
Own customer-facing coordination for security escalations, major incidents, service issues, and sensitive operational matters.
Coordinate across SOC, Detection Engineering, Threat Intelligence, suppliers, platform teams, and other stakeholders to ensure timely resolution.
Support post-incident reviews, root-cause discussions, and service improvement actions.
Ensure customers receive clear, timely, and credible communication throughout security and service escalations.
Continuous Improvement
Work closely with SOC Operations, Detection Engineering, Threat Intelligence, Product & Engineering, and Service Delivery teams to improve customer outcomes.
Provide structured feedback on customer requirements, platform enhancements, reporting needs, and operational gaps.
Contribute to continuous improvement of service standards, detection models, automation playbooks, reporting, and customer engagement practices.
Qualifications
What We're Looking For
Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline.
5+ years of relevant experience in cybersecurity, SOC operations, managed security services, technical account management, customer success, or cybersecurity service delivery.
Strong understanding of SOC operations, security monitoring, triage, investigation, incident response, and escalation.
Working knowledge of SIEM, XDR, UEBA, SOAR, detection engineering, and security automation.
Familiarity with security telemetry across endpoint, network, firewall, cloud, identity, email, and application environments.
Understanding of MITRE ATT&CK, threat detection logic, detection use cases, and rule-tuning principles.
Experience with MDR, XDR, SIEM, SOAR, or related cybersecurity operations platforms is strongly preferred.
Strong customer-facing communication, relationship management, and presentation skills.
Ability to explain complex cybersecurity matters clearly to both technical and non-technical stakeholders.
Strong ownership mindset with the ability to manage multiple customer accounts, priorities, actions, and escalations.
Confident in handling major incidents, sensitive service issues, and executive-level service reviews.
Strong Thai and English communication skills, particularly for customer engagement, cybersecurity discussions, and presentations.
Nice to Have
Professional certifications such as CISSP, Security+, CySA+, GCIH, GCIA, SC-200, or equivalent cybersecurity/vendor certifications are an advantage.
Who Will Thrive in This Role
This role is ideal for a cybersecurity professional who wants to work beyond traditional SOC monitoring.
You will have the opportunity to work across the full cybersecurity service lifecycle — from customer engagement and threat discussions to detection tuning, automation, incident response, dashboards, reporting, and continuous service improvement.
We are looking for someone who enjoys being both technical and customer-facing, takes ownership, and wants to help shape how AI and automation are applied to real-world security operations.
Contact :
RV Connex Co.,Ltd.
30/1 Moo 1, Phaholyothin Road, Klong Nueng Sub-District,Klong Luang District, Phathum Thani, 12120 Thailand.
Call: 02-090-9507 Ext. 2202, 2203, Mobile: 086-407-2305