Remote Senior CSIRT & SOC Leader — Incident Response & Threat Ops

OnTrac; United States; Remote; USD 156,000 - 195,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Life and disability coverage

401(k) retirement plan with company 2%

Flex vacation in applicable states

Floating holidays and paid sick leave

Company holidays and parental leave

Job summary

OnTrac is seeking a Senior CSIRT & SOC Manager to lead the CSIRT and Security Operations Center, maturing cyber defense capabilities and driving 24x7 coverage.

The role directs security operations, incident response, threat hunting, and detection engineering, with emphasis on governance, metrics, and automation. Remote work is possible in authorized states, with compensation up to $234k total package.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or related field; Master’s preferred.
• 10 years of progressive, direct hands-on cybersecurity experience and 5 years of leadership managing SOC/CSIRT and security operations.
• Proven success building and maturing SOC capabilities, incident response programs, and detection engineering.
• Experience developing operational metrics, executive reporting, and performance dashboards (MTTD, MTTR, KPIs, KRIs).
• Proven track record implementing SIEM, EDR, SOAR and AI-assisted response capabilities.
• Experience managing 24x7 staffing models, budgets, and MSSP/MDR vendors.
• Certifications: CISSP, CISM, GIAC GCIH, GIAC GCIA, GMON; Azure/Microsoft security certifications are preferred.

Responsibilities

• Lead daily SOC/ARC monitoring, alert triage, investigations, and incident response; manage analysts and escalation teams.
• Define responsibilities for Tier 1/2/3 and establish sustainable follow-the-sun coverage or hybrid on-call rotations.
• Ensure staffing, workforce planning, and service coverage to support current and future operations.
• Build and mature incident response procedures, runbooks, and playbooks; lead end-to-end response.
• Coordinate high-severity incidents with IT, Legal, PR, and executives; conduct post-incident reviews and drills.
• Develop detection engineering and threat hunting programs; tune SIEM/EDR for efficacy.
• Establish and report SOC KPIs/KRIs; create executive dashboards on trends and maturity.
• Drive automation, AI-assisted triage, and determine human vs automated actions.
• Governance and compliance with frameworks (NIST CSF, MITRE ATT&CK, ISO 27001, PCI-DSS, HIPAA).
• Budget, vendor management, and contract SLAs; oversee MSSPs and security partners.

Skills

Cybersecurity experience

Security leadership

24x7 staffing experience

Executive metrics & dashboards

Education

Bachelor’s degree in Cybersecurity or related field

Master’s degree preferred

Tools

SIEM

EDR

SOAR

Job description

OnTrac is seeking a Senior CSIRT & SOC Manager to lead the CSIRT and Security Operations Center, maturing cyber defense capabilities and driving 24x7 coverage.

The role directs security operations, incident response, threat hunting, and detection engineering, with emphasis on governance, metrics, and automation. Remote work is possible in authorized states, with compensation up to $234k total package.