Remote Jobs RockRemote Jobs Rock

SOC Manager (R-00253)

🕒 4 days ago
📍 🇺🇸 District Of Columbia - Remote🎙️ Leadership🌎 Security Operations Analyst💼 Full-Time
SOC OperationsIncident ResponseSIEMSOAR
Apply Now

📜 Description

  • Direct daily SOC operations, manage Tier I–III analysts and shift coverage, and maintain continuous monitoring and operational readiness.
  • Lead incident response from detection and analysis through containment, eradication, and recovery, coordinating across technical teams and federal stakeholders.
  • Oversee SIEM, SOAR, EDR, and CDM operations, including event prioritization, dashboards, and enterprise security visibility.
  • Lead post-incident reviews and root cause analysis, then implement corrective actions to improve detection and security controls.
  • Develop and maintain SOC procedures, incident response playbooks, escalation processes, and operational documentation.
  • Coordinate briefings, shift transitions, incident communications, and stakeholder contact protocols.

🛠️ Requirements

  • Minimum 8 years of progressive IT or cybersecurity experience, including at least 4 years of hands-on incident response experience.
  • At least one of GCIH, GCFA, GREM, or an equivalent industry-recognized cybersecurity certification.
  • Experience leading a SOC supporting complex enterprise systems, including Tier I–III personnel, 24/7 coverage, incident escalation, and shift scheduling.
  • Hands-on experience with SIEM, SOAR, EDR, CDM, malware analysis tools, event correlation, threat investigation, and monitoring dashboards.
  • Strong understanding of Windows and Linux, enterprise networking, security protocols, and AWS-native security services and tools.
  • Experience aligning SOC operations with NIST SP 800-61 and applicable federal cybersecurity requirements.
Full job description
True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

Position Overview

True Zero Technologies is seeking an experienced Security Operations Center (SOC) Manager to oversee daily cybersecurity operations, incident response activities, and security monitoring capabilities within complex federal environments. This leadership position is responsible for managing Tier I, II, and III SOC personnel, ensuring effective security incident detection and response, maintaining operational readiness, and driving continuous improvements in SOC processes, tools, and procedures.

The ideal candidate will possess extensive cybersecurity operations and incident response experience, strong technical leadership capabilities, and expertise in security monitoring technologies, incident management, cloud security, and federal cybersecurity standards.

Job Responsibilities

Job Responsibilities

  • SOC Operations & Personnel Management: Direct daily SOC operations, oversee Tier I, II, and III security analysts, manage staffing and shift coverage schedules, and ensure continuous security monitoring, operational readiness, and effective execution of incident response activities across federal enterprise environments.
  • Incident Response Leadership & Coordination: Manage the full incident response lifecycle, including detection, analysis, containment, eradication, and recovery. Coordinate response efforts across cybersecurity teams, IT operations, cloud service providers (CSPs), and federal stakeholders to minimize operational disruption and security risk.
  • Security Monitoring & SOC Technology Oversight: Oversee the operational effectiveness of Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Endpoint Detection and Response (EDR), and Continuous Diagnostics and Mitigation (CDM) technologies. Manage SIEM event notables, dashboards, and alert prioritization to maintain enterprise security visibility.
  • Incident Investigation & Continuous Improvement: Lead post-incident reviews, root cause analysis, and lessons-learned activities to identify security control deficiencies, improve detection capabilities, and implement corrective actions that strengthen the organization's overall cybersecurity posture.
  • SOC Documentation & Process Management: Develop, maintain, and continuously improve Standard Operating Procedures (SOPs), incident response playbooks, Concepts of Operations (CONOPS), escalation procedures, and other operational documentation to ensure consistent and efficient SOC execution.
  • Federal Compliance & Incident Response Standards: Ensure SOC operations and incident response activities align with NIST SP 800-61, applicable federal cybersecurity requirements, and customer-specific incident response policies, procedures, and reporting obligations.
  • Operational Communications & Stakeholder Coordination: Maintain SOC escalation call trees, emergency contact information, and communication protocols for internal teams, partner organizations, and cloud service providers. Lead operational briefings, shift transitions, and incident communications to ensure timely coordination and leadership awareness.

    • Job Requirements

    Job Requirements

  • Cybersecurity & Incident Response Experience: Minimum of 8 years of progressive IT or cybersecurity experience, including at least 4 years of hands-on incident response experience, with demonstrated responsibility for managing security operations, coordinating incident investigations, and supporting complex enterprise environments.
  • Professional Certifications: Must possess at least one of the following certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Reverse Engineering Malware (GREM), or an equivalent industry-recognized cybersecurity certification.
  • SOC Leadership & Operational Management: Proven experience managing or leading a Security Operations Center supporting complex enterprise systems, including oversight of Tier I, II, and III personnel, 24/7 operational coverage, incident escalation, shift scheduling, and security operations processes.
  • Security Technologies & Incident Analysis: Demonstrated hands-on experience with SIEM, SOAR, EDR, CDM, and malware analysis tools, including security event correlation, threat investigation, incident response automation, and development or management of security monitoring dashboards.
  • Operating Systems, Networking & Cloud Security: Strong technical understanding of Windows and Linux operating systems, enterprise networking, security protocols, and AWS-native security services and tools, with the ability to oversee incident detection, investigation, and response across on-premises and cloud environments.
    • Apply Now

    Similar jobs

    Search more Security Operations Analyst jobs
    Thinkahead

    SOC Team Lead

    🕒 17 days ago
    Thinkahead👥 1001 - 5000 employees🏢 Information Technology And Services
    WebsiteLinkedInAll Job Openings

    Leads SOC shift operations across a 24x7 service, overseeing alert triage, case quality, incident response, analyst coaching, and service metrics while ensuring accountable client coverage and continuous improvement.

    📍 🇺🇸 United States - Remote💼 Full-Time🎙️ Leadership🌎 Security Operations Analyst
    SOC OperationsIncident ResponseSIEMElastic Security
    View jobApply
    Affirm

    Senior Manager, Security Incident Response

    🕒 14 days ago
    Affirm👥 10,000+ employees🏢 Financial Services
    WebsiteLinkedInAll Job Openings

    Lead global security investigations and incident response, manage and develop an engineering-oriented team, and strengthen readiness, tooling, and AI-enabled workflows while guiding major incidents and executive reporting.

    📍 🇨🇦 Canada - Remote💰 $209k - $269k / year💼 Full-Time🎙️ Leadership🌎 Security Operations Analyst
    Security OperationsIncident ResponseSecurity InvestigationsIncident Command
    View jobApply
    NetSecurity

    Coordenador de SOC

    🕒 17 days ago
    NetSecurity👥 51 - 200 employees🏢 Information Technology And Services
    WebsiteLinkedInAll Job Openings

    Liderar a operação do SOC aplicando melhoria de processos, gestão de indicadores e resposta a incidentes críticos, unindo sólida experiência em tecnologias de detecção (SIEM/EDR), frameworks de segurança (MITRE ATT&CK/NIST) e forte.

    📍 🇧🇷 São Paulo - Hybrid💼 Full-Time🎙️ Leadership🌎 Security Operations Analyst
    SOC OperationsSIEMEDRSOAR
    View jobApply
    Inetum

    Blue Team Coordinator

    📅 Jul 17
    Inetum👥 10,000+ employees🏢 Information Technology And Services
    WebsiteLinkedInAll Job Openings

    Lead defensive cybersecurity operations by guiding a Blue Team, overseeing incident monitoring and response, supporting critical investigations, and improving security processes, playbooks, and performance.

    📍 🇵🇹 Portugal - Remote💼 Full-Time🎙️ Leadership🌎 Security Operations Analyst
    Blue Team OperationsSOC Team ManagementSecurity Incident ResponseThreat Hunting
    View jobApply
    View more Security Operations Analyst jobs

    Trusted by Remote Workers