Hybrid SOC Manager - Lead Threat-Informed Security Operations

Nelnet, Inc.; Lincoln (NE); Hybrid; USD 105,000 - 140,000; Full time

Benefits offered by this job

Health benefits

401K / retirement

Tuition reimbursement

Employee stock purchase plan

Wellness program

Job summary

Nelnet is seeking a Security Operations Center (SOC) Manager to lead a team of security analysts, incident responders, and threat intelligence specialists in a regulated financial services environment. You will shape detection strategy, drive automation, and coordinate with Risk, IT, and Security Engineering to protect Nelnet's assets.

Hybrid work option available; visa sponsorship not offered. You'll enhance MTTD/MTTR, lead incident responses, and develop playbooks, while mentoring staff and

Qualifications

• Bachelor's degree in computer science, Information Security, or a related field, or equivalent practical experience.
• 3+ years of cybersecurity experience, including 2+ years in a Security Operations Center (SOC).
• 1+ years of experience leading or managing a team.
• Hands-on experience with SIEM platforms and alert tuning.
• Working knowledge of SOAR, Firewalls, and EDR platforms.
• Proven incident response leadership and knowledge of MITRE ATT&CK.
• Strong written and verbal communication skills.

Responsibilities

• Lead and develop the SOC team, mentoring analysts and threat specialists.
• Oversee daily security monitoring, alert triage, and analysis of events.
• Develop and maintain SOC policies, playbooks, and workflows.
• Drive detection engineering and automate repeat tasks with SOAR.
• Lead incident response from detection through containment and recovery.
• Develop threat intelligence capabilities and share actionable IOCs and TTPs.
• Align detections to MITRE ATT&CK and coordinate with cross-functional partners.

Skills

Team leadership

Analytical thinking

Decision making

Communication

Education

Bachelor's degree in computer science, Information Security, or related field

Tools

Splunk

Google SecOps

LogRhythm

SOAR

EDR

Threat intelligence platforms

MITRE ATT&CK

CrowdStrike

SentinelOne

Microsoft Defender

Job description

Nelnet is seeking a Security Operations Center (SOC) Manager to lead a team of security analysts, incident responders, and threat intelligence specialists in a regulated financial services environment. You will shape detection strategy, drive automation, and coordinate with Risk, IT, and Security Engineering to protect Nelnet's assets.

Hybrid work option available; visa sponsorship not offered. You'll enhance MTTD/MTTR, lead incident responses, and develop playbooks, while mentoring staff and