Security Operations Manager: AI-Driven SOC Leader

Finch Turf, Inc.; Minneapolis (MN); Hybrid; USD 134,000 - 204,000; Full time

Benefits offered by this job

Health, dental, vision benefits

Stock purchase plan

Paid time-off

Job summary

SPS Commerce is seeking a Manager II, Security Operations to lead the Cyber Defense team and an 8-person SOC pod. You will direct incident response, oversee AI agent triage, and drive the SecOps roadmap while coordinating with the ACE function. Hybrid work from Minneapolis or remote options are available.

You will mentor engineers, manage contractor relationships, and ensure high detection quality and rapid containment. A strong background in security ops and enterprise tooling is required.

Qualifications

• 8+ years in security operations, detection engineering, or incident response.
• Proven Sev1 incident command experience with cross-functional teams.
• Experience maturing cyber capabilities and leading security programs.
• Experience managing MSP/MSSP relationships at scale.
• Familiarity with CrowdStrike, NG-SIEM, SOAR, and related tooling.

Responsibilities

• Own SOC operational performance metrics including MTTD/MTTR and true-positive rate.
• Serve as incident commander for Sev1 and escalated security incidents.
• Own AI agents in the SOC and detection/response pipeline.
• Manage the 8-person L1/L2 SOC pod and MSP contractor relationships.
• Translate strategy into a tactical SecOps roadmap and manage Jira projects.
• Oversee SIEM content lifecycle, NG-SIEM migration, and SOAR runbooks.
• Run 24x7 on-call coverage and coach engineers with growth plans.
• Partner with ACE to define and deliver agentic capabilities.

Skills

8+ years in security operations

Incident command leadership

Transformation of security programs

Coach engineers and analysts

Experience with MSP/MSSP relationships

Education

GIAC GCIH/GCIA/GCDA

OSCP

CISSP

Tools

CrowdStrike

NG-SIEM/Panther/Splunk/Sentinel

Jira

Tines/Torq/Phantom

Job description

SPS Commerce is seeking a Manager II, Security Operations to lead the Cyber Defense team and an 8-person SOC pod. You will direct incident response, oversee AI agent triage, and drive the SecOps roadmap while coordinating with the ACE function. Hybrid work from Minneapolis or remote options are available.

You will mentor engineers, manage contractor relationships, and ensure high detection quality and rapid containment. A strong background in security ops and enterprise tooling is required.