Senior SOC Manager: Incident Response & Security Ops

ARCO a Family of Construction Companies; St. Louis (MO); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Industry-leading bonus program

Company funded retirement

401(k) plan with match

Tuition reimbursement

Sabbatical program

Volunteer leave

Maternity/paternity benefits

Health, dental, vision insurance

Job summary

ARCO a Family of Construction Companies is seeking a Security Operations Center Manager to lead a team of Cybersecurity Analysts and drive 24/7 threat monitoring, detection, and response. You will partner with Infrastructure, Applications, and GRC to maintain a strong security posture and continuous improvement.

The role combines strategic leadership and hands‑on expertise, including managing tooling (SIEM, EDR, IDS/IPS), coordinating incident response, and guiding vulnerability remediation.

Qualifications

• 7–10 years of cybersecurity operations/engineering experience, including monitoring and incident response.
• Experience leading people, developing talent, and managing high‑performing teams.
• Hands‑on experience with core security technologies (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, vulnerability management, threat intel, SOAR).
• Strong communication skills with the ability to translate technical issues into business risk.
• Proven ability to drive measurable improvements in SOC performance.
• Experience with Azure or AWS environments.
• Familiarity with NIST 800‑171, CMMC, NIST CSF.
• Preferred CISSP, CISM, SANS/GIAC, CySA+ certifications.
• U.S. Citizenship required.
• Travel: Up to 10%.

Responsibilities

• Lead, mentor, and develop a team of Cybersecurity Analysts responsible for monitoring, triage, and incident response.
• Oversee daily SOC operations and ensure timely, effective handling of security alerts and requests.
• Automate repetitive tasks and implement process improvements to enhance efficiency.
• Maintain and update runbooks, SOPs, escalation workflows, and operational playbooks.
• Lead all security incident investigations, containment, and remediation activities.
• Conduct incident response exercises and postmortems, identifying root causes and improvements.
• Communicate security risks and incident updates to leadership in business terms.
• Oversee vulnerability scanning, prioritization, and remediation with Infrastructure partners.

Skills

Cybersecurity operations

Team leadership

Communication skills

Incident response

Threat detection

Cloud platforms

Education

CISSP

CISM

SANS/GIAC

CySA+

U.S. Citizenship

Tools

SIEM

IDS/IPS

EDR

SOAR

Firewalls

Vulnerability management

Threat intel

Job description

ARCO a Family of Construction Companies is seeking a Security Operations Center Manager to lead a team of Cybersecurity Analysts and drive 24/7 threat monitoring, detection, and response. You will partner with Infrastructure, Applications, and GRC to maintain a strong security posture and continuous improvement.

The role combines strategic leadership and hands‑on expertise, including managing tooling (SIEM, EDR, IDS/IPS), coordinating incident response, and guiding vulnerability remediation.