Security Operations Center Manager

šŸ”„ 1 hour ago

šŸ‡µšŸ‡­ Philippines – Remote

ā° Full Time

🟠 Senior

šŸ”“ Lead

šŸ›”ļø Security Operations

Where this job comes from

Posted on Workstreet's careers page, not through a job board

First seen by Remote Rocketship 1 hour ago

Logo of Workstreet

Workstreet

11 - 50 employees

Founded 2023

šŸ”’ Cybersecurity

šŸ“‹ Compliance

šŸ¤ B2B

Cybersecurity • Compliance • B2B

Workstreet is a managed security and compliance services provider that helps businesses automate and modernize their security programs. With expertise in compliance frameworks including SOC 2, ISO 27001, HIPAA, and GDPR, Workstreet supports companies in achieving their security and compliance outcomes efficiently. Their services include acting as a virtual Chief Information Security Officer (vCISO), full-scale penetration testing, and vendor risk management, aiming to streamline security processes while allowing businesses to focus on growth.

šŸ“‹ Description

• Own the day-to-day operation of a 24x7 SOC monitoring client environments. • Lead, coach, and develop a team of 10 or more SOC analysts through one-on-ones, goals, feedback, career paths, and development plans. • Build and maintain 24x7 shift schedules, including nights, weekends, and holidays. • Recruit, interview, onboard, and train new analysts. • Manage burnout and retention risks associated with round-the-clock operations. • Own SOC performance against client SLAs, including time to acknowledge, time to investigate, escalation quality, and false positive rate. • Review investigations and escalations for accuracy, completeness, and clarity before client delivery. • Oversee monitoring across EDR, firewall, IPS, WAF, and SIEM platforms and prioritize detection tuning. • Maintain SOC runbooks, playbooks, and shift handoff procedures. • Run post-incident reviews and incorporate lessons learned into detections, procedures, and training. • Serve as senior client point of contact for SOC service delivery, escalations, and incident communications. • Lead recurring client service reviews covering alert volume, notable incidents, trends, and improvements. • Work with clients during onboarding to scope log sources, tooling, escalation paths, and response responsibilities. • Handle client concerns and escalations and make judgment calls independently. • Report SOC performance, staffing, and risk to Workstreet leadership. • Partner with GRC engineers and vCISOs to support client compliance obligations. • Identify improvements to tooling, automation, and processes and make business cases for them.

šŸŽÆ Requirements

• 7+ years of security operations experience, including 3+ years managing a SOC team or comparable security operations function. • Experience running a 24x7 SOC operation and maintaining coverage, quality, and morale across shifts. • Experience leading teams of 10 or more analysts, including hiring, performance management, and scheduling. • Strong working knowledge of EDR, firewall, IPS, WAF, and SIEM platforms, with hands-on depth to review investigations and identify missed issues. • Comfortable owning client relationships and explaining incidents, trends, and SLA performance to technical and executive audiences. • Sound decision-making under pressure and composure during active escalations. • Clear written and verbal communication, with high standards for analyst reports and client communications. • Willingness to work flexible hours when needed for coverage, escalations, or shift transitions. • Active security or leadership certifications such as CISSP, CISM, GCIH, GCIA, or equivalent. • Prior MSSP experience supporting multiple client environments simultaneously. • Hands-on administration of security toolsets, including configuring, maintaining, and tuning EDR, SIEM, firewall, IPS, or WAF platforms. • Experience with automation, such as Python, PowerShell, or SOAR playbook development. • Familiarity with compliance frameworks such as SOC 2, ISO 27001, or HIPAA and how SOC activity supports audit readiness. • Experience building SOC metrics, dashboards, and reporting for clients and leadership. • Excellent written and verbal English communication skills. • Reliable, high-speed internet connection and professional home office environment supporting confidential conversations, incident calls, and uninterrupted collaboration. • Availability for management coverage across the 24x7 SOC, including escalations outside standard business hours. • Willingness and ability to travel locally for occasional onsite meetings, client reviews, team gatherings, or business activities. • Participation in live video interviews with camera on and identity verification during recruitment and onboarding. • Successful completion of identity verification and background screening, where permitted by law.

šŸ–ļø Benefits

• Career Development: Clear path with mentorship and training opportunities. • Role-Related Training: Reimbursement for the successful completion of approved training and certification courses relevant to your current role. • Competitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities. • Growth Opportunity: Early-stage company with significant room for career advancement. • Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team.

Apply Now

šŸ“Š Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Similar Jobs

šŸ•’ September 23

Satellite Office

1001 - 5000

šŸ“¦ Logistics

šŸ“£ Marketing

āœˆļø Travel

SOC Analyst monitoring security alerts and responding to incidents. Protecting global client environments through vulnerability remediation and security-platform operations.

šŸ•’ August 15

Supply Chimp

51 - 200

šŸ“¦ Logistics

šŸ„ Healthcare

šŸ“£ Marketing

SOC Analyst monitoring alerts, incidents, vulnerabilities, and compliance controls for Supply Chimp, a U.S. government supply logistics provider. Improving security operations, documentation, and risk remediation remotely.

šŸ•’ April 15

CyberOne

51 - 200

šŸ”’ Cybersecurity

šŸ¤ B2B

Senior SecOps Engineer implementing Defender and Sentinel solutions for CyberOne, a Microsoft security partner. Improving SOC detection, automation, incident response, and cloud security for enterprise customers.

Built byĀ Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com
Follow Remote Rocketship on LinkedInFollow Remote Rocketship on InstagramFollow Remote Rocketship on FacebookFollow Remote Rocketship on TikTok