Remote SOC Lead: Incident Response & Detection

Accesa; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Accesa is seeking a Security Operations Center (SOC) Manager to lead a team responsible for monitoring, investigating, and responding to cybersecurity incidents within managed services environments. The role blends hands-on technical oversight with people leadership to ensure effective detection, triage, and remediation across client environments.

You will supervise security analysts, refine playbooks and escalation paths, and report on incident trends and team performance.

Qualifications

• Demonstrated leadership experience in security operations, incident response, or cyber defense teams.
• Strong working knowledge of SIEM platforms, threat detection techniques, and incident response methodologies.
• Familiarity with attack vectors, malware behavior, network/host forensics, and vulnerability management concepts.
• Solid communication and coordination skills with technical and non-technical stakeholders.
• Certifications such as CISSP, CISM, or GIAC are commonly expected.

Responsibilities

• Coordinate and supervise a team of security analysts handling monitoring, detection, and incident response activities.
• Oversee triage and investigation of security alerts, ensuring threats are contained, escalated, and documented.
• Develop, maintain, and refine SOC playbooks, standard operating procedures, and escalation paths.
• Track and report on key security metrics, incident trends, and overall team performance for internal and client stakeholders.
• Partner with engineering, infrastructure, and service delivery teams to strengthen detection coverage and remediation workflows.
• Support ongoing improvements to tooling, automation, and process maturity across the SOC.

Job description

Accesa is seeking a Security Operations Center (SOC) Manager to lead a team responsible for monitoring, investigating, and responding to cybersecurity incidents within managed services environments. The role blends hands-on technical oversight with people leadership to ensure effective detection, triage, and remediation across client environments.

You will supervise security analysts, refine playbooks and escalation paths, and report on incident trends and team performance.