Hybrid SOC Manager: Lead Detection & Incident Response

Nelnet; Madison (WI); Hybrid; USD 105,000 - 140,000; Full time

Benefits offered by this job

Hybrid work option

Medical, dental, vision benefits

401K and student loan repayment

Generous paid time off

Job summary

Nelnet is hiring a Security Operations Center (SOC) Manager to lead a growing team responsible for detecting and investigating cyber threats in a regulated financial services environment. You will shape detection strategy, drive automation, and partner with multiple security functions to protect Nelnet’s critical assets.

The role demands hands-on leadership, expertise in SIEM, SOAR, EDR, and threat intelligence, and a track record of improving MTTD/MTTR.

Qualifications

• Bachelor’s degree or related field with practical experience.
• 3+ years in cybersecurity with 2+ years in SOC.
• 1+ years in people management or team lead roles.
• Hands-on with SIEM and investigation, correlation rules, detection engineering, alert tuning.
• Experience with SOAR, Firewalls, and EDR platforms.

Responsibilities

• Lead, coach, and mentor security analysts and threat specialists.
• Oversee daily security monitoring, alert triage, detection, and analysis of events.
• Develop SOC policies, playbooks, and workflows.
• Drive detection engineering and reduce false positives.
• Lead incident response from containment to recovery.

Skills

Cybersecurity leadership

Security operations

Incident response

Threat detection

MTTD/MTTR

Education

Bachelor’s degree in Computer Science/Info Security

Tools

Splunk

Google SecOps

LogRhythm

SOAR

EDR (CrowdStrike/SentinelOne)

MITRE ATT&CK

Job description

Nelnet is hiring a Security Operations Center (SOC) Manager to lead a growing team responsible for detecting and investigating cyber threats in a regulated financial services environment. You will shape detection strategy, drive automation, and partner with multiple security functions to protect Nelnet’s critical assets.

The role demands hands-on leadership, expertise in SIEM, SOAR, EDR, and threat intelligence, and a track record of improving MTTD/MTTR.