Point your AI agent at freehire and let it find you a job.

Get the CLI →

SG Analytics

NewBe an early applicant

Assistant Manager - IT Security Operations

Posted Updated
Discussion

Roles and Responsibilities

  • Oversee L1-L3 SOC operations, alert triage, incident investigations, shift handovers, and SLA performance management.
  • Lead Sev1 and Sev2 critical incident response bridges to execute containment, eradication, recovery, and post-incident RCA.
  • Configure, tune, and troubleshoot security controls across Web Filter, EDR, IPS, perimeter, and endpoint tools.
  • Develop, test, and refine SIEM detection rules, use cases, and operational playbooks to minimize false positives.
  • Conduct hypothesis-driven threat hunting and IOC analysis using current threat intelligence.
  • Perform malware triage in controlled environments and direct advanced analysis activities.
  • Own security technology onboarding from POC success criteria through production deployment and operational acceptance.
  • Plan and execute security tool migrations, policy mappings, log integrations, cutovers, and documentation.
  • Direct change management procedures, risk impact assessments, rollback strategies, and post-change validations.
  • Coach, mentor, and train L1-L3 security analysts, leading daily operational calls and performance reviews.
  • Maintain runbooks, audit evidence, and compliance documentation while tracking risk remediation to closure.
  • Communicate incident progress, technical decisions, and operational risks to client IT and key business stakeholders.

Preferred Candidate Profile

  • Experience: 7+ years in IT Security Operations, SOC leadership, and hands-on tool management.
  • Technical Expertise: Strong knowledge of SOC/SIEM platforms, EDR, IPS, Web Filtering, Network Traffic Analysis, and IOC investigation.
  • Operations & Delivery: Experience managing major incident bridges, threat hunting, detection engineering, and technology migrations.
  • Certifications: Preferred security certifications (e.g., CISSP, CEH, GCIH, CISM, or platform-specific certifications).
  • Soft Skills: Strong investigative mindset, structured troubleshooting, effective team coaching, and stakeholder management.

Skills

Apply

See also

Security jobs by country — openings, pay and top skills →

Tailor your CV for this role?

We couldn't check your fit for this role — add a CV to your profile to see it next time.