SOC Manager

Qnity; Chestnut (AL); On-site; USD 120,000 - 170,000; Full time

Job summary

Qnity is seeking a senior Security Operations Center (SOC) leader to drive incident response, threat detection, and security monitoring across advanced electronics and high-tech operations. You will mentor analysts, coordinate MSSP partnerships, and refine SIEM content with MITRE ATT&CK-aligned use cases.

The role emphasizes hands-on leadership, automation via SOAR, and building measurable security outcomes in a fast-paced environment.

Qualifications

• 6+ years in Security Operations, Incident Response, Threat Detection, or related roles.
• 3+ years leading SOC or incident response teams.
• Proven track record handling complex cybersecurity incidents.
• Hands-on experience with Microsoft Sentinel and Defender for Endpoint.
• Experience managing security vendors and MSSPs.
• Strong project management and communication skills.

Responsibilities

• Lead investigation, containment, and resolution of cybersecurity incidents as Incident Commander.
• Oversee day-to-day SOC operations and MSSP performance.
• Develop and tune threat detection use cases and SIEM rules (MITRE ATT&CK aligned).
• Drive automation initiatives through SOAR to boost efficiency.
• Lead threat hunting, forensics, and root cause analysis.
• Establish and report SOC metrics (MTTD, MTTR, coverage, trends).

Skills

Security Operations

Incident Response

Threat Detection

SOC Leadership

Vendor Management

SOAR Automation

MITRE ATT&CK

KQL / Kusto Query Language

Tools

Microsoft Sentinel

Microsoft Defender for Endpoint

Job description

Are you looking to power the next leap in the exciting world of advanced electronics? Do you want to help solve problems that drive success in the rapidly evolving technology and connectivity landscape? Then bring your problem-solving, passion, and creativity to help us power the next leap in electronics.

At Qnity, we’re more than a global leader in materials and solutions for advanced electronics and high-tech industries – we’re a tight-knit team that is motivated by new possibilities, and always up for a challenge. All our dedicated teams contribute to making cutting-edge technology possible. We value forward-thinking challengers, boundary-pushers, and diverse perspectives across all our departments, because we know we play a critical role in the world enabling faster progress for all. Learn how you can start or jumpstart your career with us.

The SOC Manager is responsible for leading the organization's Security Operations Center, overseeing incident response, security monitoring, threat detection, MSSP management, and continuous improvement of security operations capabilities. This role requires a hands-on technical leader who can effectively manage people, processes, and technology while driving measurable security outcomes.

Key Responsibilities

• Lead the investigation, containment, and resolution of cybersecurity incidents, serving as Incident Commander for high-severity events.

• Manage day-to-day SOC operations, including oversight of external MSSP partners and service delivery performance.

• Develop, tune, and maintain threat detection use cases and SIEM correlation rules aligned to industry frameworks such as MITRE ATT&CK.

• Drive automation initiatives through SOAR technologies to improve operational efficiency and response times.

• Lead threat hunting, forensic investigations, and root cause analysis activities.

• Establish and report on key SOC performance metrics, including MTTD, MTTR, detection coverage, and incident trends.

• Evaluate and implement AI-driven security capabilities to enhance detection and response processes.

• Mentor analysts and provide technical leadership across the security operations function.

Required Qualifications

• 6+ years of progressive experience in Security Operations, Incident Response, Threat Detection, or Cybersecurity Operations.

• 3+ years of leadership, supervisory, or technical lead experience within a SOC or incident response environment.

• Demonstrated experience leading complex cybersecurity incident investigations.

• Strong hands-on experience with Microsoft Sentinel, Microsoft Defender for Endpoint, and Kusto Query Language (KQL).

• Experience managing security vendors, MSSPs, and operational service delivery.

• Strong project management, organizational, and communication skills.

Demonstrated Capability Requirements

• Independently lead major security incidents through containment, recovery, and post-incident analysis.

• Develop and optimize security detections, threat hunting activities, and SIEM content.

• Analyze security data and translate findings into actionable risk reduction strategies.

• Manage competing operational priorities and drive projects to successful completion.

• Experience in identifying, designing, and implementing automation solutions that improve Security Operations efficiency.

• Experience leveraging SOAR platforms, scripting, APIs, workflow automation, or low-code/no-code technologies to eliminate repetitive manual tasks and streamline security processes.

• Communicate effectively with technical teams, leadership, and business stakeholders.

• Deliver measurable improvements in SOC effectiveness, operational efficiency, and security outcomes.

Preferred Qualifications

• CISSP, GCIH, GCFA, GNFA, SC-200, SC-100, or equivalent certifications.

• Experience with industrial, manufacturing, OT, or Microsoft Defender for IoT environments.

Success Factors

Successful candidates consistently demonstrate technical leadership, sound judgment, strong analytical skills, operational accountability, and the ability to deliver results in fast-paced security environments.

Note:

Qualification for this position is based on demonstrated capability and successful application of required skills and experience, not solely on job title, tenure, or certifications.

Qnity is an equal opportunity employer. Qualified applicants will be considered without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability or any other protected class. If you need a reasonable accommodation to search or apply for a position, please visit our Accessibility Page for Contact Information.

Qnity offers a comprehensive pay and benefits package. To learn more visit the Compensation and Benefits page.