Security Operations (SOC) Manager (100% on-site)

Crest Security Assurance; Smyrna (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Crest Security Assurance is seeking a seasoned SOC leader to manage a 24x7x365 Security Operations Center team on-site in Smyrna, GA. The role oversees daily SOC activities, incident response, threat analysis, and escalation, ensuring adherence to performance standards, compliance, and budget.

Qualifications

• Minimum 7–10 years in an SOC environment.

Responsibilities

• Lead IT Security Operations and manage technical teams.
• Track and report team activities and control scheduling and task assignments.
• Provide support to the resolution of technical and project initiatives.
• Conduct real-time monitoring, detection, analysis and isolation of incidents.
• Manage security products, networks and endpoints; oversee egress/ingress connections.
• Monitor IT systems, websites, servers, databases, applications, networks, data centers and endpoints.
• Collaborate with NOC to improve procedures and compliance with security policies.
• Provide monitoring and analysis support; review and assess logs and events.
• Develop and maintain SOPs; train new staff on SOP execution.
• Evaluate performance results and recommend changes affecting project growth.
• Plan, initiate and manage IT projects; lead technical staff.
• Plan project stages and assess business implications.
• Monitor progress to meet deadlines, standards and costs.

Skills

SOC management

Team leadership

Incident response

Threat analysis

Monitoring & analysis

Education

DoD IAT II

CSSP-A

CEH

GCIA

GCIH

GCIA

GSEC

SSCP

Tools

Mandiant MD

Alert Triage

SOC Operations

Defense in Depth

Splunk

SOAR

AWS

EnCase

Job description

Manages a team of cybersecurity professionals within a 24x7x365 Security Operations Center (SOC), with a primary shift schedule of 8:00 AM to 5:00 PM on-site. This role requires comprehensive oversight of day-to-day SOC activities to protect the agency’s digital infrastructure from evolving cyber threats. The position is responsible for managing personnel, directing operational workflows, and ensuring timely execution of security tasks in alignment with performance standards, compliance requirements, and budget constraints. The ideal candidate will possess deep experience across all core SOC functions including monitoring, incident response, threat analysis, and escalation management, and will play a critical role in maintaining the agency’s cybersecurity posture.

Responsibilities

• Responsible for IT Security Operations and managing technical teams.
• Track and report team activities and control scheduling and task assignments.
• Provide support to the resolution of technical and project focused initiatives.
• Conduct real-time monitoring, detection, analysis and isolation of incidents on the network.
• Manage the agency’s cybersecurity products, networks and end-user devices, as well as the egress and ingress connections to agency systems.
• Monitor agency information technology systems and data, including websites, servers, databases, applications, networks, data centers, and endpoints.
• Work closely with the NOC and support the NOC to improve procedures and services to ensure compliance with security policies.
• Provide monitoring and analysis support services to include actively reviewing and assessing system and network logs, events, information, and data from various systems, components, and tools available in the SOC.
• Develop and maintain standard operating procedures (SOPs) for monitoring and analysis tasks, and ensure all incoming staff are trained in the execution of SOPs.
• Possess a comprehensive knowledge across key tasks and high impact assignments.
• Evaluate performance results and recommend major changes affecting short-term project growth and success.
• Plan, initiate, and manage information technology (IT) projects.
• Lead and guide the work of technical staff.
• Plan project stages and assess business implications for each stage.
• Monitor progress to ensure deadlines, standards, and cost targets are met.

Requirements:

• Minimum of 7-10 years SOC experience
• Minimum of 3-5 years in a Management role
• DoD IAT II required certification/s (one of the following):
• CCNA-Security
• CySA+ (CSA+)
• GICSP
• GSEC
• Security+ CE
• CND
• SSCP
• CSSP-A required certification/s (one of the following):
• CEH
• GCIA
• GCIH
• CEH
• GCIA
• GCIH
• Experience with the following skills/tools:
• Mandiant Managed Defense (FireEye/Trellix NX)
• Knowledge of Alert Triage
• SOC Operations
• Defense in Depth (DiD)
• Splunk
• Security Orchestration Automation and Response (SOAR)
• Amazon Web Services (AWS)
• EnCase

Location: No Telework Available - On-Premises in Smyrna, GA