Founding Senior SOC Leader – Security Operations

Motive; Seattle (WA); On-site; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health benefits

Dental & vision coverage

401k contribution

Paid time off

Disability coverage

Job summary

Motive is hiring a Senior Manager, Security Operations to establish and lead Motive's SOC across cloud, production, and enterprise environments. You will shape the detection strategy, runbooks, and 24/7 incident response, acting as incident commander during significant events while driving automation and AI-first improvements.

You will own the telemetry platform, threat hunting, threat intelligence, and endpoint/workload security, building a small senior team to tackle hard security problems

Qualifications

• 8+ years in security operations, incident response, detection engineering or threat intelligence.
• 3+ years leading teams and mentoring security staff.
• Hands-on experience writing detections and leading incidents as commander.
• Experience rebuilding or building a SOC function from the ground up.
• Strong experience with modern detection tools (SIEM, EDR, SOAR) and cloud-native telemetry.
• Deep cloud and container security monitoring, with AWS and Kubernetes preferred.
• Identity-centric attack path expertise across SaaS and cloud.

Responsibilities

• Stand up and grow the SOC with an AI-first, data-driven operating model.
• Own detection strategy across production and cloud estates and map to MITRE ATT&CK.
• Lead 24/7 incident response and act as incident commander for major incidents.
• Own telemetry, analytics platform, and automation for MTTD/MTTR and coverage.
• Establish threat hunting and threat intelligence programs aligned to Motive’s sector.
• Architect and build triage, enrichment, correlation, and investigation automation.

Job description

Motive is hiring a Senior Manager, Security Operations to establish and lead Motive's SOC across cloud, production, and enterprise environments. You will shape the detection strategy, runbooks, and 24/7 incident response, acting as incident commander during significant events while driving automation and AI-first improvements.

You will own the telemetry platform, threat hunting, threat intelligence, and endpoint/workload security, building a small senior team to tackle hard security problems