MDR Operations Lead - 24/7 Security & Incident Response

Guardz; Miami (FL); On-site; USD 120,000 - 170,000; Full time

Job summary

Guardz is seeking an experienced MDR Manager to lead our Security Operations team. You will oversee day-to-day MDR operations, ensure 24/7 coverage, and act as the final escalation point for Tier 3 threats in multi-tenant MSP environments.

You will mentor MDR Analysts, drive process improvements, and manage complex investigations with defensible documentation, partnering with product and engineering to strengthen detections.

Qualifications

• 5+ years in SOC, MDR, or IR handling complex attacks, incl. 2+ years in a leadership role.
• Hands-on with EDR (SentinelOne, CrowdStrike, Defender for Endpoint) and ITDR across Google Workspace.
• Proficient with SQL, BigQuery, or SPL/KQL for triage and hunting.
• Experience with MITRE ATT&CK aligned detection and threat-hunting practices.
• Excellent communication to explain high-risk findings to both technical and non-technical audiences.

Responsibilities

• Own 24/7 shift coverage, escalation paths, and on-call rotations to ensure continuous monitoring.
• Manage response SLAs and report SOC KPIs to leadership.
• QA on alerts/incidents; maintain and improve runbooks, playbooks, and SOC standards.
• Lead, mentor MDR Analysts; conduct 1:1s, training, and post-incident reviews.
• Act as technical lead for T3 incidents and document full lifecycle defenses.
• Correlate alerts across EDR, ITDR, and email security; perform proactive threat hunts.
• Utilize Guardz AI agents, BigQuery, SQL/KQL to triage and define incident scope at machine speed.
• Collaborate with MSPs on major incidents and feedback into product/threat research.

Skills

SOC leadership

Incident response

EDR experience

SQL / KQL

MITRE ATT&CK

Clear communication

Education

Bachelor's degree in cybersecurity / CS / IT

Tools

SentinelOne

CrowdStrike

Defender for Endpoint

Google BigQuery

Snowflake

Splunk

Elastic

Job description

Guardz is seeking an experienced MDR Manager to lead our Security Operations team. You will oversee day-to-day MDR operations, ensure 24/7 coverage, and act as the final escalation point for Tier 3 threats in multi-tenant MSP environments.

You will mentor MDR Analysts, drive process improvements, and manage complex investigations with defensible documentation, partnering with product and engineering to strengthen detections.