AI-Driven SOC Lead: Detection & 24/7 Response

Gomotive; Northern (KY); Remote; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health benefits

Paid time off

401k plan

Job summary

Motive is seeking a Senior Manager, Security Operations to build and lead Motive's SOC, shaping the detection strategy, tooling, and operating model. You will own the full detection and response lifecycle across cloud, production, and corporate estates, reporting to the CISO.

You will oversee 24/7 incident response, threat hunting, threat intelligence, security analytics, and endpoint/workload security, with a focus on automation, AI-first processes, and senior leadership.

Qualifications

• 8+ years in security operations, incident response, detection engineering or threat intelligence, with 3+ years leading teams.
• Hands-on: written detections, led incidents, built automation, and can discuss your own work.
• Experience building or rebuilding a SOC function and operating across estates (production, cloud, enterprise).

Responsibilities

• Stand up and grow the SOC — operating model, coverage, runbooks, escalation, hiring and career development for a distributed team.
• Own detection strategy and coverage across estates, map to MITRE ATT&CK and threat model with gaps prioritized by risk.
• Extend detection into production and cloud workloads in partnership with Platform Engineering; build cross-boundary detections.
• Lead 24/7 incident response across product and enterprise environments, acting as incident commander for significant incidents.
• Own telemetry and analytics platform — collection, normalization, enrichment, retention and cost; measure MTTD/MTTR and detection coverage.
• Establish a hypothesis-driven threat hunting program and tailored threat intelligence.
• Own EDR across corporate fleet; protect production runtimes and workloads.
• Lead phishing/social engineering defense with Compliance/Trust partner.
• Architect AI-first operating model for SOC with in-house triage/enrichment/automation.

Skills

Security operations

Incident response

Threat intelligence

Detection engineering

Automation

Cloud security

AWS

Kubernetes

Team leadership

Executive communication

Tools

SIEM

EDR

SOAR

Cloud telemetry

Job description

Motive is seeking a Senior Manager, Security Operations to build and lead Motive's SOC, shaping the detection strategy, tooling, and operating model. You will own the full detection and response lifecycle across cloud, production, and corporate estates, reporting to the CISO.

You will oversee 24/7 incident response, threat hunting, threat intelligence, security analytics, and endpoint/workload security, with a focus on automation, AI-first processes, and senior leadership.