SOC Manager

ixolabs.ai; Ottawa; Hybrid; CAD 82,656,000 - 130,872,000; Part time

Job summary

ixolabs.ai seeks a senior SOC leader for a part-time engagement to drive detection, response, and automation across security operations. You will guide evaluation of AI outputs for SIEM rule creation, incident prioritization, and playbook optimization while coordinating with analysts.

You will develop benchmarks, validate SOC metrics, and mentor the team in MITRE ATT&CK, NIST CSF, and SOAR integrations, driving proactive defense and rapid containment.

Qualifications

• 7+ years in a Security Operations Center
• 3+ years in a leadership/management role
• Certifications such as CISSP, CISM, GCIH, GCIA are highly preferred
• Extensive hands-on experience with leading SIEM platforms and SOAR tooling

Responsibilities

• Evaluate AI outputs related to SIEM rule creation, alert triage, and incident prioritization within a SOC context.
• Assess the accuracy and effectiveness of AI-generated playbooks for common security incidents (e.g., malware infection, phishing, unauthorized access).
• Provide detailed feedback on AI's ability to correlate events from diverse security tools (e.g., EDR, firewall logs, vulnerability scanners).
• Develop benchmark scenarios for AI to analyze, covering topics like threat hunting, anomaly detection, and security automation (SOAR).
• Validate AI's explanations of SOC metrics (e.g., MTTR, MTTD, false positive rates) and their impact on operational efficiency.
• Refine AI's understanding of threat intelligence integration into SIEM and its role in proactive defense.

Skills

Leadership

Mentoring

SOC operations

Education

CISSP

CISM

GCIH

GCIA

Tools

Splunk

Microsoft Sentinel

IBM QRadar

Exabeam

Job description

Key Responsibilities

• Evaluate AI outputs related to SIEM rule creation, alert triage, and incident prioritization within a SOC context.
• Assess the accuracy and effectiveness of AI-generated playbooks for common security incidents (e.g., malware infection, phishing, unauthorized access).
• Provide detailed feedback on AI's ability to correlate events from diverse security tools (e.g., EDR, firewall logs, vulnerability scanners).
• Develop benchmark scenarios for AI to analyze, covering topics like threat hunting, anomaly detection, and security automation (SOAR).
• Validate AI's explanations of SOC metrics (e.g., MTTR, MTTD, false positive rates) and their impact on operational efficiency.
• Refine AI's understanding of threat intelligence integration into SIEM and its role in proactive defense.

Ideal Qualifications

• Minimum 7 years of experience in a Security Operations Center, with at least 3 years in a leadership or management role.
• Certifications such as CISSP, CISM, GCIH, or GCIA are highly preferred.
• Extensive hands‑on experience with leading SIEM platforms (e.g., Splunk, Microsoft Sentinel, IBM QRadar, Exabeam).
• Proven track record in developing and optimizing SOC processes, incident response plans, and threat detection strategies.
• Strong understanding of security frameworks (e.g., MITRE ATT&CK, NIST CSF) and their application in a SOC.
• Experience with security automation (SOAR) platforms and scripting (Python, PowerShell) for incident response.

Project Timeline

• Start Date: Within 2 weeks
• Duration: 6-12 months (renewable)
• Commitment: Part‑time, 20-30 hours/week