Cyber Defense Manager: Build & Lead SOC & Incident Response

JustMarkets; United States; Remote; USD 170,000 - 250,000; Full time

Job summary

JustMarkets is seeking a senior Cyber Defense leader to own and advance the organization's security operations, incident response, and vulnerability management across cloud and on‑prem environments. You will build a high‑performing team and establish detection coverage while coordinating with IT, Product, Legal, and executives.

This role requires 10+ years in information security, hands-on SOC and incident command, and expertise with SIEM/EDR and cloud security.

Qualifications

• 10+ years of experience in Information Security.
• 3+ years in a security management or team lead role with direct people management experience.
• Hands-on experience managing SOC operations and leading incident command.
• Ability to design and maintain detection logic across SIEM, EDR, and cloud platforms.
• Knowledge of attack scenarios (ATO, credential theft) and MITRE ATT&CK mapping.
• Experience prioritizing vulnerabilities using CVSS.
• Hands-on experience with enterprise SIEM (Splunk, Microsoft Sentinel, Chronicle, Elastic) and SOAR tooling.
• Understanding of cloud security in AWS, GCP, or Azure.
• Understanding of IAM, PAM, SSO, and identity attack vectors.
• English - Upper-Intermediate or higher.
• Ukrainian - Fluent.

Responsibilities

• Own Cyber Defense execution across SOC, detection engineering, incident response, and exposure remediation
• Lead alert triage quality, escalation standards, incident command, and response coordination
• Prioritize critical vulnerabilities and exposures using asset criticality, exploitability, and business impact
• Manage Cyber Defense dashboards, runbooks, remediation follow-up, and operational metrics
• Coordinate with IT, Platform, Product, GRC, Legal, and business owners during incidents and remediation
• Build and develop the Cyber Defense team, including hiring, onboarding, mentoring, and retaining security talent
• Drive continuous improvement of detection coverage, response playbooks, and security controls based on lessons learned and threat intelligence
• Report on Cyber Defense performance, incidents, and risk posture to security leadership and stakeholders

Skills

Security leadership

SOC operations

Incident command

Detection logic design

Vulnerability prioritization

Threat intelligence

SIEM

SOAR

Cloud security

IAM/PAM/SSO

Tools

Splunk

Microsoft Sentinel

Chronicle

Elastic

Job description

JustMarkets is seeking a senior Cyber Defense leader to own and advance the organization's security operations, incident response, and vulnerability management across cloud and on‑prem environments. You will build a high‑performing team and establish detection coverage while coordinating with IT, Product, Legal, and executives.

This role requires 10+ years in information security, hands-on SOC and incident command, and expertise with SIEM/EDR and cloud security.