Security Operations Lead

PeerSource; Conshohocken (Montgomery County); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health, dental, vision insurance

Retirement plan matching

Job summary

PeerSource is seeking a hands-on Security Operations Manager to strengthen enterprise-wide threat detection, incident response, and security operations. This role combines technical expertise in detection engineering, threat hunting, and automation with mentoring SOC Analysts and scalable security processes.

The ideal candidate is proactive and able to communicate findings to executive leadership, including the CISO, while driving improvements across the SOC.

Qualifications

• 5+ years in Security Operations, Detection & Response, or Incident Handling.
• Direct SOC leadership or management experience is preferred.
• Proven ability to develop detection rules, tune alerts, and build enrichment pipelines.
• Strong scripting for security automation (Python/PowerShell/Bash).
• Experience with threat hunts and post-incident reviews.

Responsibilities

• Lead security alert monitoring, triage, investigation, and incident response.
• Develop and optimize SIEM detection rules and alert enrichment.
• Design and implement SOC playbooks and automated response workflows.
• Lead proactive threat hunting initiatives leveraging telemetry and threat intel.
• Manage security incidents through containment, eradication, and root cause analysis.
• Evaluate tools and processes to close coverage gaps in detection and response.
• Mentor SOC Analysts and establish operational standards and ticket procedures.

Skills

Security Ops

Leadership

SIEM Platforms

EDR Solutions

SOAR Technologies

Threat Hunting

Incident Response

Mentoring Analysts

Scripting for Automation

Tools

Microsoft Sentinel

QRadar

CrowdStrike

Microsoft Defender

SentinelOne

Proofpoint

Netskope

Job description

PeerSource is currently recruiting for a Security Operations Manager on a Direct Hire basis. This role is mostly remote with periodic onsite required out of the Frisco, TX (preferred) or Conshohocken, PA offices.

Summary

We are seeking a hands-on Security Operations Manager to strengthen enterprise-wide threat detection, incident response, and security operations. This role combines technical expertise in detection engineering, threat hunting, and automation with the opportunity to mentor SOC Analysts and establish scalable security processes. The ideal candidate is a proactive problem-solver who thrives in an evolving security environment and takes ownership of building and improving SOC capabilities.

Responsibilities

• Lead security alert monitoring, triage, investigation, and incident response, ensuring timely resolution, accurate case documentation, and appropriate escalation.
• Develop and optimize SIEM detection rules, alert enrichment, log collection, and false-positive suppression to improve threat visibility and detection accuracy.
• Design and implement SOC playbooks, escalation procedures, and automated response workflows to improve operational efficiency and consistency.
• Lead proactive threat hunting initiatives, leveraging advanced telemetry and threat intelligence to identify vulnerabilities and emerging threats.
• Manage security incidents through containment, eradication, root cause analysis, and post-incident reviews, driving corrective actions and security improvements.
• Evaluate existing security tools, telemetry, and processes to identify coverage gaps and strengthen enterprise detection and response capabilities.
• Develop automation and orchestration solutions to streamline incident handling, reduce manual effort, and improve response times.
• Mentor SOC Analysts, establish operational standards, and drive accountability for incident management, ticket resolution, and documentation.

Required Skills

• 5+ years of hands-on experience in Security Operations, Detection & Response, or Incident Handling, including direct SOC experience.
• Prior leadership or direct management experience is highly preferred.
• Strong experience with SIEM platforms (SecOps, Microsoft Sentinel, QRadar), EDR solutions (CrowdStrike, Microsoft Defender, SentinelOne), and SOAR technologies.
• Experience with Microsoft security technologies, Proofpoint, and Netskope, including security tool implementation, integration, and optimization.
• Proven ability to develop detection rules, tune alerts, optimize security logs, build enrichment pipelines, and execute incident response playbooks.
• Proficiency in Python, PowerShell, or Bash for security automation, orchestration, and data analysis.
• Experience conducting threat hunts, root cause investigations, and incident reviews, with the ability to identify security gaps and recommend improvements.
• Self-directed, analytical, and results-oriented, with the ability to mentor analysts, build scalable processes, and communicate technical findings to executive leadership, including the CISO.
• Flexibility to support after-hours incident escalations as needed.

H1 sponsorship is not available.

We offer contract, contract-to-hire, and direct hire opportunities throughout the US and support W2 as well as independent consultants working on a Corp-to-Corp basis. W2 benefits with PeerSource include health, dental, vision, and life insurance as well as a matching retirement plan.