Security Operations Center Manager

At Workstreet, we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP.  We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.

We are the team our clients trust to be their eyes and ears around the clock, watching over their environments even when their own teams are offline. Our MDR function spans real-time monitoring and alert triage, threat detection and investigation, and incident analysis and response guidance, using the EDR, SIEM, IPS, WAF, and firewall platforms deployed across our client base to catch what automated rules miss and help clients stop incidents before they become breaches.

Workstreet is seeking a Security Operations Center (SOC) Manager to join our Security Services team. You will own the day-to-day operation of a 24x7 SOC that monitors client environments, and you will manage a team of 10 or more SOC analysts across rotating shifts. The SOC investigates alerts, delivers findings and remediation guidance, and escalates to client stakeholders, who carry out the actual response in their own environments.

This is a working leadership role. You will build the schedule, set the quality bar for investigations, coach analysts, and stay close enough to the tooling (EDR, firewall, IPS, WAF, and SIEM) to judge detection quality yourself. You will also be a visible point of contact for clients on service performance and escalations. The successful candidate will take ownership of shift coverage, team performance, and client-facing SOC delivery within their first 60 days.

Team Leadership

●      Lead, coach, and develop a team of 10 or more SOC analysts, with regular one-on-ones, clear goals, and honest performance feedback.

●      Build and maintain the 24x7 shift schedule so every shift has the right coverage and skill mix, including nights, weekends, and holidays.

●      Recruit, interview, and onboard new analysts, and run a training program that gets them investigating independently quickly.

●      Set career paths and development plans for analysts, and support certification and training goals.

●      Manage burnout and retention risks that come with round-the-clock operations.

SOC Operations

●      Own SOC performance against client SLAs, tracking metrics such as time to acknowledge, time to investigate, escalation quality, and false positive rate.

●      Review investigations and escalations for accuracy, completeness, and clarity before they reach clients, and coach analysts on gaps.

●      Oversee monitoring across EDR, firewall, IPS, WAF, and SIEM platforms, and prioritize detection tuning to reduce noise and close coverage gaps.

●      Maintain SOC runbooks, playbooks, and shift handoff procedures so open investigations never stall between shifts.

●      Run post-incident reviews and drive lessons learned back into detections, procedures, and training.

●      7+ years of security operations experience, including 3+ years managing a SOC team or comparable security operations function.

●      Has run a 24x7 SOC operation and knows how to keep coverage, quality, and morale steady across shifts.

●      Experience leading teams of 10 or more analysts, including hiring, performance management, and scheduling.

●      Strong working knowledge of EDR, firewall, IPS, WAF, and SIEM platforms, with enough hands-on depth to review an investigation and spot what was missed.

●      Comfortable owning client relationships and explaining incidents, trends, and SLA performance to technical and executive audiences.

●      Makes sound decisions under pressure and stays composed when an escalation is active.

●      Writes and speaks clearly, and holds analysts to the same standard in their reports and client communications.

●      Willing to work flexible hours when needed to support coverage, escalations, or shift transitions.

●      Active security or leadership certifications, such as CISSP, CISM, GCIH, GCIA, or equivalent.

●      Prior MSSP experience supporting multiple client environments at once.

●      Hands-on administration of security toolsets, including configuring, maintaining, and tuning EDR, SIEM, firewall, IPS, or WAF platforms.

●      Experience with automation, such as scripting (e.g., Python, PowerShell) or SOAR playbook development, to reduce manual triage and reporting work.

●      Familiarity with compliance frameworks such as SOC 2, ISO 27001, or HIPAA, and how SOC activity supports audit readiness.

●      Experience building SOC metrics, dashboards, and reporting for clients and leadership.

●      Excellent written and verbal English communication skills, with the ability to engage confidently with analysts, clients, and leadership across global teams.

●      A reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, incident calls, and uninterrupted collaboration.

●      Availability for management coverage across the 24x7 SOC, including escalations that arise outside standard business hours. Occasional flexibility to adjust working hours is expected to support the team and clients.

●      Willingness and ability to travel locally for occasional onsite meetings, client reviews, team gatherings, or business activities as needed.

●      Candidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding.

●      Employment is contingent upon successful completion of identity verification and background screening, where permitted by law.

●      Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with Workstreet's operating principles.

●      Candidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step.

As an equal opportunity employer, Workstreet is committed to providing employment opportunities to all individuals. All applicants for positions at Workstreet will be treated without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.