Cybersecurity Operations Manager | SOC Automation

Insight Global; Scottsdale (AZ); Hybrid; USD 145,000 - 195,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Life Insurance

Disability Insurance

FSA

401(k) with Company Match

PTO

Paid Holidays

Tuition Assistance

EAP

Employee Discounts

Wellness Programs

Career Development Opportunities

Job summary

Insight Global is seeking a Cybersecurity Operations Manager to evolve the SOC into an automation-driven, engineering-led entity. You will lead detection engineering, threat hunting, incident response, and cloud security initiatives while guiding a team of analysts and engineers.

The role focuses on advancing SOAR-driven workflows, expanding automation, and managing external MDR partners to meet defined SLAs. A hybrid Scottsdale-based position offers a comprehensive benefits package.

Qualifications

• 6+ years of information security experience.
• Technical leadership or management experience within cybersecurity operations.
• Strong experience with SOC operations, SIEM, incident response, detection engineering, and threat hunting.
• Working knowledge of SOAR and security automation.
• Scripting experience with Python, PowerShell, and/or Bash.
• Cyber incident response experience.
• Knowledge of modern attacker tactics, techniques, and procedures (TTPs).
• Experience across cloud security, vulnerability management, detection, and incident response.

Responsibilities

• Lead the evolution toward an Agentic, automation-driven SOC.
• Build and mature detection engineering, threat hunting, and threat intelligence.
• Develop automated response workflows using SOAR, scripting, and orchestration.
• Lead SOC operations, investigations, escalations, and incident response.
• Oversee SIEM, SOAR, CNAPP, vulnerability management, cloud security, and MDR technologies.
• Build internal security engineering and automation capabilities.

Skills

Cybersecurity Operations

Technical leadership

SOC operations

SOAR automation

Python/PowerShell/Bash

Incident response

Threat hunting

Cloud security

Vulnerability management

Education

Bachelor's degree in a related technical field

Tools

ReliaQuest GreyMatter

Upwind CNAPP

Rapid7 InsightVM

SIEM

SOAR

Job description

CYBERSECURITY OPERATIONS MANAGER | SOC AUTOMATION

SALARY: $145,000 - $195,000 + Bonus

LOCATION: Scottsdale, AZ 85260 (Hybrid/Onsite)

BENEFITS: Medical, Dental, Vision, Life & Disability Insurance, FSA, 401(k) with Company Match, PTO, Paid Holidays, Tuition Assistance, Employee Assistance Program (EAP), Employee Discounts, Wellness Programs, Career Development Opportunities

SUMMARY & OVERVIEW

We’re seeking an experienced Cybersecurity Operations Manager to lead the continued evolution of a Security Operations Center into a proactive, engineering-driven, and highly automated Agentic SOC. This role combines technical leadership, people leadership, and SOC modernization, with responsibility across security automation, detection engineering, threat hunting, threat intelligence, incident response, cloud security, and vulnerability management. A key priority will be advancing automation and internal security engineering capabilities to reduce manual analyst effort, improve detection and response, and strengthen overall SOC effectiveness.

Responsibilities:

• Lead the evolution toward an Agentic, automation-driven SOC.
• Build and mature detection engineering, threat hunting, and threat intelligence.
• Develop automated response workflows using SOAR, scripting, and orchestration.
• Lead SOC operations, investigations, escalations, and incident response.
• Oversee SIEM, SOAR, CNAPP, vulnerability management, cloud security, and MDR technologies.
• Build internal security engineering and automation capabilities.
• Lead and develop SOC analysts and security engineers.
• Establish SOC metrics around detection effectiveness, response performance, and operational maturity.
• Manage MDR and external security partners against defined service levels and outcomes.

QUALIFICATIONS & EXPERIENCE

• 6+ years of information security experience.
• Technical leadership or management experience within cybersecurity operations.
• Strong experience with SOC operations, SIEM, incident response, detection engineering, and threat hunting.
• Working knowledge of SOAR and security automation.
• Scripting experience with Python, PowerShell, and/or Bash.
• Cyber incident response experience.
• Knowledge of modern attacker tactics, techniques, and procedures (TTPs).
• Experience across cloud security, vulnerability management, detection, and incident response.
• Experience leading security professionals and working with internal and external partners.
• Bachelor’s degree required, preferably in a related technical field.

NICE-TO-HAVE

• 4+ years of SOC experience.
• Experience building or operating an Agentic or automation-driven SOC.
• Intelligent or AI-driven security automation experience.
• Experience developing SOC engineering / security engineering capabilities.
• Experience with ReliaQuest GreyMatter, Upwind CNAPP, Rapid7 InsightVM, or comparable technologies.
• Knowledge of NIST, ISO 27001, and PCI DSS.
• Telecommunications or highly regulated industry experience.

Compensation:

$145,000 - $195,000 base salary range

Exact compensation may vary based on several factors, including skills, experience, education, and overall qualifications.

Benefits include:

- Comprehensive Medical, Dental, Vision, Life & Disability Insurance

- Annual Bonus

- 401(k) with Company Match

- Paid Time Off (PTO) and Paid Holidays

- Employee Assistance Program (EAP)

- Tuition Assistance and Career Development Programs

- Flexible Spending Account (FSA)

- Referral Bonus Program

- Wellness and Employee Recognition Programs