Senior Manager, AI-Driven SOC & FedRAMP Security

Rubrik; Phoenix (AZ); On-site; USD 213,000 - 319,000; Full time

Job summary

Rubrik is seeking a Senior Manager to lead the Security Operations Center, including FedRAMP‑authorized environments. You will scale detection, incident response, and overall security operations while shaping an AI‑driven SOC strategy and cross‑team collaboration.

You’ll own 24/7 monitoring, incident management, and the evolution of processes, playbooks, and metrics. Strong leadership and executive communication are essential in this role.

Qualifications

• 8+ years in security operations or incident response, with leadership roles.
• Experience as Incident Manager leading investigations and cross-team coordination.
• Proven track record maturing a SOC operating model (24/7 coverage, playbooks, escalation).
• Hands-on detection and response with SIEM/SOAR familiarity (MITRE ATT&CK).
• Experience hiring, mentoring, and developing SOC analysts.

Responsibilities

• Direct 24/7 monitoring across shifts and regions.
• Serve as Incident Manager during major security incidents and coordinate responses.
• Drive continuous improvement of SOC processes, playbooks, and runbooks.
• Ensure FedRAMP-relevant incident response rigor and compliance.
• Own AI-enabled SOC roadmap: triage, investigation support, automation.
• Grow detection maturity and expand coverage for cloud, SaaS, on‑prem, FedRAMP.
• Lead budgeting, staffing, and resource planning for the SOC.
• Evaluate and select SIEM/SOAR platforms and tooling.
• Provide regular updates to CISO and executives on posture and incidents.

Skills

Security leadership

Incident response

SOC management

Threat detection

Executive communication

Tools

SIEM/SOAR platforms

Threat intelligence tools

Job description

Rubrik is seeking a Senior Manager to lead the Security Operations Center, including FedRAMP‑authorized environments. You will scale detection, incident response, and overall security operations while shaping an AI‑driven SOC strategy and cross‑team collaboration.

You’ll own 24/7 monitoring, incident management, and the evolution of processes, playbooks, and metrics. Strong leadership and executive communication are essential in this role.