Security Operations Center (SOC) Manager (Cybersecurity)

Location: Hybrid in Lincoln, NE; Centennial, CO; or Madison, WI. Remote work is available part of the week for associates living within 30 miles of an office, with in-office presence three days per week. Candidates must already be authorized to work in the United States without current or future visa sponsorship.

Annual compensation: $105,000–$140,000, depending on experience.

Company

hirify.global is a diversified company providing student loan servicing, professional services, consumer lending, payment processing, renewable energy solutions, and K–12 and higher education services.

What you will do

• Lead, coach, mentor, and develop security analysts, incident responders, and threat intelligence specialists while managing staffing, shift coverage, on-call schedules, goals, and performance reviews.
• Oversee security monitoring, alert triage, detection, analysis, escalation, SOC policies, procedures, playbooks, workflows, and operational metrics including MTTD and MTTR.
• Manage and optimize SIEM, SOAR, EDR, and threat intelligence platforms; drive detection engineering, alert tuning, automation, and visibility improvements.
• Lead incident response through containment, eradication, recovery, testing, tabletop exercises, and post-incident reviews.
• Direct cyber threat intelligence activities, including threat actor tracking, IOCs, TTPs, intelligence sharing, and briefings for security leadership.
• Partner with Security Engineering, Vulnerability Management, Detection Engineering, Risk, IT, Compliance, business units, external peers, law enforcement, and managed security vendors; lead Purple Teaming exercises.

Requirements

• Bachelor’s degree in computer science, information security, or a related field, or equivalent practical experience.
• 3+ years of cybersecurity experience, including 2+ years working in a Security Operations Center.
• 1+ years of experience leading or managing a team, including team lead or supervisor experience.
• Hands-on SIEM expertise, including investigation, correlation rules, detection engineering, and alert tuning; examples include Splunk, Google SecOps, and LogRhythm.
• Working knowledge of SOAR, firewalls, and EDR platforms such as CrowdStrike, SentinelOne, or Microsoft Defender.
• Experience leading incident response from detection through containment, eradication, recovery, and post-incident review.
• Understanding of threat intelligence principles and frameworks, including MITRE ATT&CK.
• Strong analytical, problem-solving, decision-making, written communication, and verbal communication skills, including the ability to brief technical teams and executive leadership.

Nice to have

• Certifications such as CCSP, CISM, BTL1, BTL2, CompTIA Security+ or CySA+, and GIAC GSEC, GCIH, GCIA, or GCDA.
• Cloud security monitoring experience in AWS, Azure, or Google Cloud.
• Knowledge of NIST CSF, NIST 800-53, ISO 27001, and PCI DSS.
• Scripting or automation experience in Python or PowerShell.
• Experience in financial services or another regulated industry.
• Experience with digital forensics, threat hunting, or Purple Team exercises.
• Familiarity with Codex, Claude, Gemini, and responsible use of AI for SOC processes, investigations, and analyst productivity.

Culture & Benefits

• Hybrid work environment supporting flexibility and work-life integration, with three in-office days per week for eligible associates.
• Medical, dental, vision, HSA, FSA, life and disability insurance, employee assistance, and wellness programs.
• Earned time off, 401(k), student loan repayment, employee stock purchase program, tuition reimbursement, and performance-based incentive pay.
• Welcoming, respectful, equal-opportunity workplace with reasonable accommodations available for qualified individuals with disabilities.
• Drug-free and tobacco-free workplace.

Hiring process

• Applications may receive an initial review using automated or AI-enabled tools to identify relevant skills and experience; a recruiter makes advancement decisions.
• Reasonable accommodation requests may be submitted to Talent Acquisition by phone or email.