Security Operations
SOC Manager Recruiting
Runs the security operations center day to day: analysts, shifts, triage quality and escalation.
About the role
The SOC Manager keeps the security operations center running well. That means hiring and coaching analysts, managing shift schedules, keeping alert triage consistent and making sure real incidents are escalated quickly and correctly.
Analyst burnout and turnover are constant pressures in a SOC, so we put real weight on how candidates build teams, train junior analysts and reduce alert fatigue through tuning and automation.
Typical responsibilities
- Manage Tier 1 to Tier 3 analysts and the shift schedule
- Maintain triage procedures, runbooks and escalation paths
- Tune detections and automation with detection engineering to reduce noise
- Report on SOC performance and incident trends
- Hire, train and retain analysts
What we assess in candidates
- People management in a high-pressure, shift-based environment
- Practical knowledge of SIEM, EDR and SOAR platforms
- Approach to analyst training and retention
- Quality control of triage and escalation
How we search for a SOC Manager
We target managers and senior SOC leads who already manage people and have worked with your toolset. Interviews cover how they handle shift coverage, analyst development and the trade-off between speed and accuracy in triage.
Frequently asked questions
Can a senior analyst step into a SOC Manager role?
Often yes, if they have led shifts or mentored analysts. We assess leadership experience directly rather than relying on title alone.
Do SOC Managers need to work on-site?
It depends on your setup. Many SOCs now run fully remote or hybrid. We confirm this early so the candidate pool matches your model.
Related functions
Start a search
Looking for a SOC Manager?
Tell us about the role and the team. We will reply within one business day.