Senior SOC Lead: Incident Response & Threat Detection

firstam; Santa Ana (CA); On-site; USD 129,000 - 172,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401k

PTO / paid sick leave

Employee stock purchase plan

Job summary

First American is seeking an Information Security Operations Manager to lead its Security Operations Center and defender-first security program. You will manage day-to-day security operations, coordinate incident response, and oversee monitoring, alerts, and remediation activities across enterprise environments.

You will mentor staff, refine processes, and partner with security services providers to ensure 24/7 coverage and effective risk management.

Qualifications

• Hands-on knowledge of incident response tools (SIEM, SOAR, EDR/XDR).
• Experience leading a SOC environment and monitoring security alerts.
• Excellent written and verbal communication to executive leadership.
• Bachelor's degree in CS/IT/Cybersecurity or equivalent.

Responsibilities

• Lead as Incident Commander for incident response actions.
• Oversee 24/7 SOC service delivery, staffing, and budget considerations.
• Tune threat detection logic and prioritize alerts across systems.
• Develop and maintain incident response playbooks and processes.

Skills

SIEM

SOAR

EDR/XDR

Identity Threat Detection

Network Threat Detection

SOC leadership

Analytical skills

Executive communication

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

SIEM tools

SOC monitoring platforms

Job description

First American is seeking an Information Security Operations Manager to lead its Security Operations Center and defender-first security program. You will manage day-to-day security operations, coordinate incident response, and oversee monitoring, alerts, and remediation activities across enterprise environments.

You will mentor staff, refine processes, and partner with security services providers to ensure 24/7 coverage and effective risk management.