SOC Manager (Cybersecurity)

Location: United States citizenship required; periodic travel to hirify.global or customer locations may be required.

Company

hirify.global provides tailored managed cybersecurity services across diverse customer environments through a 24x7x365 Security Operations Center.

What you will do

• Lead SOC analysts across recruiting, staffing, scheduling, coaching, performance management, technical development, retention, and career development.
• Maintain 24x7x365 coverage and accountability for investigation quality, escalations, customer communications, service levels, and operational deliverables.
• Serve as a senior escalation point for complex investigations, high-severity incidents, customer issues, and cross-team coordination.
• Manage SOC operations across multiple customer environments and monitor alert volume, response timelines, SLA attainment, detection quality, false positives, case quality, and workload.
• Improve detection and response through process refinement, playbooks, automation, AI-assisted workflows, technology integration, and intelligence-informed priorities.
• Partner with security and customer teams on onboarding, operational reviews, incident calls, reporting, dashboards, and service improvements.

Requirements

• 8+ years of cybersecurity experience, including significant experience in Security Operations, Incident Response, Threat Detection, Threat Hunting, Detection Engineering, Cyber Threat Intelligence, or related cyber defense functions.
• Prior people-management experience in a SOC, MDR, MSSP, or comparable cyber defense environment, including coaching, performance management, skills development, staffing, and operational accountability.
• Strong understanding of investigations across endpoint, identity, network, email, cloud, SaaS, and hybrid environments.
• Experience with enterprise SIEM and EDR/XDR platforms such as Microsoft Sentinel, Splunk, Elastic Security, Microsoft Defender XDR, CrowdStrike Falcon, Trellix, SentinelOne, or equivalents.
• Experience with SOAR, security automation, case management, or AI-assisted security operations technologies.
• Experience investigating Microsoft 365, Microsoft Entra ID, Azure, AWS, cloud workloads, SaaS applications, or other cloud and identity environments.
• Understanding of attacker methodologies, attack lifecycles, identity-based attacks, ransomware, account compromise, business email compromise, cloud attacks, and other modern threats.
• Experience applying MITRE ATT&CK to investigations, detections, threat hunting, or defensive coverage measurement, plus experience improving SOC processes, playbooks, runbooks, escalation procedures, and investigative standards.
• Strong communication, problem-solving, judgment, decision-making, and prioritization skills for ambiguous, time-sensitive, and high-impact security events.
• U.S. citizenship and ability to obtain and maintain a Secret security clearance required.
• Ability to travel periodically to hirify.global or customer locations as business requirements dictate.

Culture & Benefits

• Work in a fast-paced, multi-client managed security environment.
• Participate in an after-hours management and incident escalation rotation supporting 24x7x365 operations.
• Collaborate with Detection Engineering, Cyber Threat Intelligence, Threat Hunting, Incident Response, Red Team, Security Engineering, SOAR/Automation, customer security, IT, and leadership teams.