SOC Manager

KMD Group; Warszawa; On-site; PLN 180,000 - 240,000; Full time

Job summary

KMD Group is seeking a SOC Manager to lead and evolve the security operations center. You will oversee Detection & Response and Advanced Threat Operations, ensuring continuous monitoring, rapid containment and effective investigations across 24/7 cycles.

Fluency in English and a strong leadership track record are essential. You will report to the Head of Security Operations and collaborate with engineering, vulnerability management and IT teams to strengthen defenses.

Qualifications

• 5+ years of cyber security operations experience.
• At least 2 years in a SOC leadership role (manager or team lead).
• Hands-on understanding of security monitoring and incident response in enterprise environments.
• Experience with SIEM/EDR architectures and modern tooling.
• Ability to translate technical findings into clear business impact and decisions.
• Experience leading teams across shifts and critical operational services.

Responsibilities

• Lead the day-to-day operation and continued development of the SOC, ensuring service quality, resilience and readiness.
• Build and mature a 24/7/365 operating model for Detection & Response, including staffing, shift governance and escalation paths.
• Provide leadership to Detection & Response and Advanced Threat Operations, ensuring priorities and collaboration.
• Own operational performance through metrics and drive measurable improvements.
• Oversee triage, containment and coordination of security incidents with relevant stakeholders.
• Ensure complex investigations are escalated appropriately and supported by threat hunting and forensics.
• Maintain and improve SOC processes, playbooks, detection coverage and post-incident reviews.
• Collaborate with SOC Engineering, Vulnerability Management, IT operations and service owners to strengthen controls.
• Communicate operational risk and incident status to Security Operations leadership and stakeholders.
• Support supplier and technology governance across SOC toolsets.

Skills

Cyber security operations

SOC leadership

Incident response

Threat detection

Communication with stakeholders

People leadership

English proficiency

Education

Degree in cybersecurity or information technology

Tools

SIEM

EDR

Microsoft Defender

Microsoft Sentinel

CrowdStrike

Job description

At KMD, we build digital solutions used by millions of people around the world. These solutions are the digital foundations of our most important institutions, from governments and public services to financial industries and private companies. Our mission is to ensure that they are reliable, accessible, and efficient.

We believe that the future is what you make it. So a career at KMD is a career with purpose and freedom. One where you’ll have a direct hand in improving the lives of people, while being empowered with the resources and autonomy to shape the course of your own professional journey.

KMD Security Operations Center (SOC) is the operational backbone of our cyber defense. As we expand monitoring and response to 24/7/365 coverage , we are looking for a SOC Manager to establish clear operational ownership, lead frontline response and ensure effective escalation of complex or high-impact incidents.

You will report to the Head of Security Operations and lead two complementary capabilities: Detection & Response, operating around the clock, and Advanced Threat Operations, providing specialist investigation, threat hunting, forensics and detection expertise.

Your future role:

Lead the day-to-day operation and continued development of the SOC, with accountability for service quality, resilience and readiness.

Build and mature a 24/7/365 operating model for Detection & Response, including staffing, shift governance, handovers and escalation paths.

Provide leadership to Detection & Response and Advanced Threat Operations, ensuring clear priorities, effective collaboration and professional development.

Own operational performance through meaningful metrics, and use them to drive measurable improvement.

Oversee triage, containment and coordination of security incidents, ensuring timely activation of relevant technical and business stakeholders.

Ensure complex or high-impact investigations are escalated appropriately and supported by threat hunting, forensic analysis and malware triage.

Maintain and improve SOC processes, playbooks, detection coverage, case management and post-incident review practices.

Work closely with SOC Engineering, Vulnerability Management, Penetration Testing, IT operations and service owners to strengthen preventive and detective controls.

Communicate operational risk, incident status and improvement priorities clearly to Security Operations leadership and other stakeholders.

Support supplier and technology governance across the SOC toolset

What you bring:

5+ years of experience in cyber security operations, including at least 2 years in a SOC leadership: manager, team lead or comparable operational management role.

Hands-on understanding of security monitoring, incident response, threat detection and investigation in enterprise environments.

Experience leading teams that work across shifts or provide business-critical operational services.

Strong knowledge of SIEM and EDR operating models; experience with Microsoft Defender, Microsoft Sentinel and/or CrowdStrike stack is highly relevant.

Ability to translate technical findings into clear business impact, priorities and decisions for non-technical stakeholders.

Experience with operational governance, KPIs, service improvement, incident reviews and stakeholder escalation.

Confident people leadership, including coaching, performance development, recruitment and support during high-pressure incidents.

Excellent communication and documentation skills, with fluency in written and spoken English.

A degree in cybersecurity, information technology or a related field, or equivalent relevant professional experience.

Availability for an employment contract and willingness to support major incidents outside normal business hours when management escalation is required.

KMD (an NEC company) is committed to providing equal opportunities. Hence, we invite all qualified interested applicants to apply for career opportunities. At KMD all aspects of employment and cooperation including the decision to hire/cooperate with will be based on merit, competence, performance, and business needs without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or any other status protected under local anti-discrimination legislation.