Security Operations Center Manager
Overview
ASM Research is seeking a Security Operations Center (SOC) Manager to lead both the strategic direction and daily operational effectiveness of our organization's cybersecurity defenses. This individual will oversee a team of security analysts and engineers responsible for the continuous monitoring, detection, analysis, and response to cyber threats and incidents, ensuring the confidentiality, integrity, and availability of all information systems — including those processing sensitive and classified data.
Key Responsibilities
- Provide operational oversight for all SOC activities, ensuring 24/7 readiness and effectiveness of monitoring, detection, and response functions.
- Serve as the senior escalation point for the incident response lifecycle, managing incidents from initial detection through resolution and post-incident review.
- Lead, mentor, and develop a team of security analysts and engineers, fostering professional growth and technical excellence.
- Develop and mature SOC strategies, processes, and technologies to strengthen the organization's security posture over time.
- Prepare and deliver executive-level reports on SOC performance, metrics, and emerging threat trends.
- Collaborate with cross-functional teams (IT, engineering, compliance, leadership) to align security initiatives with business and mission objectives.
- Ensure strict adherence to government and agency-specific policies, procedures, and compliance requirements.
- Maintain a paramount focus on protecting the integrity and confidentiality of organizational assets, including systems handling sensitive and classified data.
Required Qualifications
- Education: Bachelor's degree in a relevant technical field (Cybersecurity, Computer Science, Information Technology, or related discipline).
- Experience: Minimum of 5–7 years of cybersecurity experience, including at least 5 years in a SOC leadership capacity.
- Certifications: Certified Information Systems Security Professional (CISSP) required. Other relevant certifications (CISM, GCIH, or other GIAC certifications) will also be considered.
- Clearance: Active TS clearance, SCI-eligible.
- Technical Expertise:
- In-depth knowledge of SIEM and EDR platforms
- Strong grounding in incident response methodologies
- Thorough understanding of network architectures and security controls