Group Operations Manager

Sapsf; United States; On-site; USD 120,000 - 180,000; Full time

Job summary

Sapsf in the United States is seeking a Group Operations Manager for a 24x7 SOC to oversee security operations, incident response, and threat management.

You will mentor analysts, drive improvements to SIEM use cases, automate repetitive tasks, and coordinate cross-functional teams to meet SLAs while reducing risk.

This leadership role requires hands-on security expertise, strong tooling knowledge (EDR, WAF, NIDS), and the ability to align security work with business priorities.

Qualifications

• 5+ years in security operations/SOC
• Experience in 24x7x365 SOC environments
• Strong knowledge of SIEM, EDR, WAF, and NIDS tooling
• Ability to mentor junior analysts and lead incident response

Responsibilities

• Monitor and analyze security events and threats in a 24x7 SOC environment.
• Perform daily triage of alerts and tickets and escalate incidents as needed.
• Act as escalation point for SOC analysts and mentor junior staff.
• Lead incident response activities and conduct technical investigations.
• Conduct cyber threat research to enhance SIEM use cases and playbooks.
• Perform proactive threat hunting and investigations without predefined IOC.
• Collaborate with engineering to evaluate and implement security solutions.
• Support and manage security tools including EDR, WAF, and NIDS.
• Automate repetitive SOC tasks to improve efficiency.
• Troubleshoot and resolve log-related issues to minimize disruption.
• Support audits by providing evidence and documentation.
• Participate in disaster recovery drills and risk mitigation activities.
• Work within ITSM frameworks to manage incidents, changes, and service requests.

Skills

SOC monitoring

Alert triage

Incident escalation

Incident response

Threat research

Threat hunting

Collaboration with engineering

Security tools proficiency

Automation scripting

Log troubleshooting

Audit support

Disaster recovery

ITSM processes

Tools

SIEM

EDR

WAF

NIDS

Job description

Career Opportunities: Group Operations Manager (173498)

Requisition ID173498-Posted10/08/2026

• Monitor and analyze security events and threats as part of a 24x7x365 SOC environment.
• Perform daily triage of alerts and tickets, leveraging threat intelligence and escalating incidents as needed.
• Act as a technical escalation point for SOC analysts and mentor junior team members.
• Lead incident response activities, conducting technical investigations and providing expert guidance.
• Conduct cyber threat research to enhance SIEM use cases and playbook development.
• Perform proactive threat hunting and investigations without predefined indicators of compromise.
• Collaborate with engineering teams to evaluate and implement new or updated security solutions.
• Support and manage security tools including EDR, WAF, and NIDS platforms.
• Automate repetitive SOC tasks to improve operational efficiency and reduce manual errors, using scripting and workflow tools.
• Troubleshoot and resolve log related issues, ensuring minimal disruption to business operations and adherence to SLAs.
• Support internal and external audits by providing evidence.
• Participate in disaster recovery drills, security assessments, and SOC-related risk mitigation activities.
• Work within ITSM frameworks to manage incidents, changes, and service requests.