Senior SOC Leader - AI-Driven Security Ops (FedRAMP)

Rubrik; Hagåtña (GU); Vor Ort; USD 213.000 - 319.000; Vollzeit

Zusammenfassung

Rubrik is seeking a Senior Manager to lead our Security Operations Center, including our FedRAMP‑authorized environment. Incident response sits at the core of what the SOC does, alongside detection and monitoring, and this role owns all of it.

You'll inherit a SOC that has already grown a lot in scale and maturity, and your job is to take it further: stronger detection and incident response, broader coverage as our environment gets more complex, and a real strategy for AI in the SOC.

Qualifikationen

• 8+ years in security operations with SOC leadership experience.
• Experience serving as Incident Manager leading investigations.
• Ability to mature a 24/7 SOC operating model with playbooks and escalation.
• Hands-on detection/response with SIEM/SOAR and ATT&CK knowledge.
• Experience hiring/mentoring SOC analysts and reporting metrics.
• Experience supporting FedRAMP, SOC 2, ISO 27001 or similar audits.
• Strong communication skills with exec audiences; US citizenship required for FedRAMP.

Aufgaben

• Direct 24/7 monitoring coverage and incident management for major security events.
• Lead incident response, coordinate across InfoSec teams during investigations.
• Improve SOC processes, playbooks, runbooks, and escalation procedures.
• Own AI-enabled SOC roadmap: triage, investigation support, automation.
• Grow detection maturity and expand coverage across cloud, SaaS, on‑prem, FedRAMP.
• Set strategy, budgeting, staffing, and operating model for the SOC.
• Report metrics (MTTD/MTTR, coverage) to technical and exec leaders.
• Evaluate/build SIEM/SOAR tooling and integrate with security stack.

Kenntnisse

Security operations

Incident response

SOC leadership

SIEM/SOAR

Threat monitoring

Executive communication

Tools

SIEM/SOAR platforms

Jobbeschreibung

Rubrik is seeking a Senior Manager to lead our Security Operations Center, including our FedRAMP‑authorized environment. Incident response sits at the core of what the SOC does, alongside detection and monitoring, and this role owns all of it.

You'll inherit a SOC that has already grown a lot in scale and maturity, and your job is to take it further: stronger detection and incident response, broader coverage as our environment gets more complex, and a real strategy for AI in the SOC.