Manager, Security Operations Center

Huntress; United States; Remote; USD 165,000 - 185,000; Full time

Benefits offered by this job

Remote work

Paid time off

Parental leave

Medical benefits

401(k)

Stock options

Education allowance

Digital reimbursement

Job summary

Huntress, a remote-first cybersecurity company, is hiring a Security Operations Manager to lead the global SOC team that investigates and responds to incidents 24/7 across millions of endpoints. You will define processes, scale operations tenfold, and mentor analysts, while partnering with Product, Support and Sales to improve workflows and overall incident response capabilities.

This role offers remote US work, competitive compensation, bonus and equity, and a strong benefits package to support

Qualifications

• 5+ years of Security Analyst experience in a global 24x7 SOC with a focus on Windows forensics.
• 3+ years of team lead or managerial experience in a global operations center or Incident Response role, preferably within MSSP/MDR.
• Active engagement in the information security community via conferences or public projects.
• Continually learning latest threat actor tradecraft, detection techniques, and security operations concepts.
• Ability to create detailed process diagrams and operating procedures from workflows.

Responsibilities

• Design, implement, and enforce internal processes to reduce burnout and increase productivity in a global SOC.
• Manage and enforce 24/7 shift coverage year-round.
• Hold weekly 1:1 meetings to discuss initiatives and career progression.
• Develop and implement analyst training programs for onboarding and advanced skills.
• Coordinate with Product to prioritize new capabilities for analysts.

Skills

SOC leadership

Security operations

Windows forensics

Incident response

Data-driven

Job description

What We Do:

Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.

Founded in 2015 by former NSA cyber operators, the company is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers' protection.

the company now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.

Reports to: Director, Security Operations Center

Location: Remote US

Compensation: $165,000-$185,000 base plus bonus and equity

What You’ll Do:

The the company Security Operations Center is a global team of security analysts dedicated to investigating and responding to incidents on our partners’ networks 24/7, 365 days a year. Daily activities consist of providing investigation, containment, and response actions across millions of endpoints.

This role is accountable for defining and streamlining processes, workflows, and playbooks that enable effective day-to-day operations. As the company continues to grow, we are laser-focused on scaling our operations and force-multiplying our human analysts by 10X. This position is responsible for enabling analysts to meet our mission and achieve internal Service Level Objectives for response times. The Security Operations Manager will work with their peer regional managers to ensure consistent global operations while providing our analyst team with training opportunities and career growth.

Responsibilities:

• Design, implement, and enforce internal processes to reduce burnout and increase the productivity of the operations center against a global set of expectations and standards
• Manage and enforce local/global shift coverage to ensure 24/7 operations are maintained 365 days a year
• Meet with analysts in a 1:1 setting weekly to socialize focus initiatives, gather feedback, provide feedback, and enable analysts to progress rapidly in their career
• Contribute to the development and implementation of analyst training programs designed to streamline onboarding and advance analyst skill sets in Digital Forensics, Incident Response, Malware Analysis, Detection Engineering, Threat Hunting, and Automation
• Work with the Product organizations to prioritize the creation of new capabilities designed to augment and force multiple analyst capabilities
• Maintain accountability for routine quality assurance for your designated region
• Engage with our Support organization to create streamlined workflows for partner/customer requests that need Security Operations Center analysis
• Strengthen and mature our existing processes and relationships with our Tactical Response, Threat Hunting, and Detection Engineering teams within the Security organization
• Provide one level of technical leadership for analysts of the Security Operations Center analysts
• Ensure team members fully understand the goals and objectives of the company’ mission and how their work fits into the bigger picture
• Provide key input and guidance to company stakeholders such as Marketing, Sales, Support, and Product
• Develop, track, and report on Objectives and Key Results linked to Security Operations Center focus initiatives
• Help operationalize new technologies and services that the company brings to market
• Participate in public speaking engagements in both webinar and in-person formats

What You Bring To The Team:

• Experience in leading diverse cybersecurity teams with various skills. These teams work in Security Operations, Digital Forensics, Incident Response, Malware Analysis, Threat Hunting, and Detection Engineering
• 5+ years of Security Analyst experience working in a global 24x7 security operations center with a focus on Windows forensics
• 3+ year of team lead or managerial experience in a global operations center or Incident Response role. Preferably within a MSSP, MDR provider, or Incident Response service.
• Actively engaged in the information security community by attending conferences or contributing to conversations/projects in the public domain
• Continually learning and staying up to date on the latest threat actor tradecraft, detection techniques, and security operations concepts
• Ability to identify workflows being performed and create detailed process diagrams and operating procedures
• Effective communicator of highly technical concepts to stakeholders of varying technical backgrounds
• Demonstrated experience leading initiatives or projects that required delegation and accountability to achieve success
• Data-driven approach with experience in Data Science concepts

What We Offer:

• 100% remote work environment - since our founding in 2015
• Generous paid time off policy, including vacation, sick time, and paid holidays
• 12 weeks of paid parental leave
• Highly competitive and comprehensive medical, dental, and vision benefits plans
• 401(k) with a 5% contribution regardless of employee contribution
• Life and Disability insurance plans
• Stock options for all full-time employees
• One-time $500 reimbursement for building/upgrading home office
• Annual allowance for education and professional development assistance
• $75 USD/month digital reimbursement
• Access to the BetterUp platform for coaching, personal, and professional growth

the company is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.

We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.

We do discriminate against hackers who try to exploit businesses of all sizes.

Accommodations:

If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to [e-mail]. Please note that non-accommodation requests to this inbox will not receive a response.

the company uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights.

#BI-Remote

the company is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.

We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.

We do discriminate against hackers who try to explore businesses of all sizes.

Accommodations:

If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to [e-mail]. Please note that non-accommodation requests to this inbox will not receive a response.

the company uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our Candidate Privacy Notice for more details on our practices and your data privacy rights.

#BI-Remote