Senior SOC Leader, AI-Driven Security Operations

Rubrik; Juneau (AK); On-site; USD 213,000 - 319,000; Full time

Job summary

Rubrik is seeking a Senior Manager to lead the Security Operations Center, overseeing 24/7 monitoring, incident response and AI-enabled SOC initiatives within a FedRAMP environment. You will guide the team across commercial and FedRAMP scopes, improving detection, response, and analyst efficiency while delivering strategy and governance.

You will own the SOC roadmap, drive playbooks and escalation procedures, and partner with Threat Operations to close detection gaps.

Responsibilities

• Direct 24/7 monitoring and ensure coverage across shifts and regions.
• Serve as Incident Manager for major security incidents, leading the response and coordinating across InfoSec teams during investigations.
• Drive continuous improvement of SOC processes, including incident response playbooks, runbooks, and escalation procedures.
• Make sure incident response processes hold up to FedRAMP requirements.
• Own the roadmap for AI-enabled SOC capabilities: AI-assisted triage, investigation support, and response automation.
• Deploy AI/ML and automation to cut down L1 toil and alert fatigue.
• Partner with Threat Operations to grow detection maturity and coverage as the Rubrik environment expands.
• Set direction and operating model for a modern SOC and manage budgets and staffing.

Skills

Security operations

Incident management

SOC leadership

SIEM/SOAR

AI/ML tooling

Threat intel

Compliance audits

Executive comms

FedRAMP

US citizenship

Tools

SIEM/SOAR platforms

MITRE ATT&CK

Job description

Rubrik is seeking a Senior Manager to lead the Security Operations Center, overseeing 24/7 monitoring, incident response and AI-enabled SOC initiatives within a FedRAMP environment. You will guide the team across commercial and FedRAMP scopes, improving detection, response, and analyst efficiency while delivering strategy and governance.

You will own the SOC roadmap, drive playbooks and escalation procedures, and partner with Threat Operations to close detection gaps.