SOC Manager

Stellar IT Solutions LLC; St. Louis (MO); On-site; USD 120,000 - 160,000; Full time

Job summary

Stellar IT Solutions LLC is seeking a senior Cybersecurity Manager to lead a team of analysts, oversee SOC operations, and drive threat mitigation. This role blends strategic leadership with hands-on security implementation and improvements across tools, processes, and governance.

The successful candidate will mentor staff, coordinate with Infra, Applications, and GRC, and communicate risk in business terms to leadership.

Qualifications

• 7-10 years of cybersecurity operations/engineering experience including monitoring and incident response.
• Experience leading people, developing talent, and managing high-performing teams.
• Hands-on experience with core security technologies (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, vulnerability management, threat intel, SOAR).
• Strong communication skills with the ability to translate technical issues into business risk.
• Proven ability to drive measurable improvements in SOC performance.
• Strong organizational skills with the ability to prioritize and delegate.
• Experience with Azure or AWS environments.
• Familiarity with industry frameworks (NIST 800-171, CMMC, NIST CSF).
• Preferred certifications: CISSP, CISM, SANS/GIAC, CySA+, or similar.

Responsibilities

• Lead, mentor, and develop a team of Cybersecurity Analysts responsible for monitoring, triage, and incident response.
• Oversee daily SOC operations and ensure timely, effective handling of security alerts and requests.
• Automate repetitive tasks and implement process improvements to enhance efficiency.
• Maintain and update runbooks, SOPs, escalation workflows, and operational playbooks.
• Lead all security incident investigations, containment, and remediation activities.
• Conduct regular incident response exercises and postmortems, identifying root causes and tracking improvements.
• Stay current on emerging threats and assess readiness to defend against them.
• Manage and optimize security tooling (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, threat intel platforms, etc.).
• Oversee vulnerability scanning, prioritization, and remediation with Infrastructure partners.
• Support patching, hardening, and secure configuration efforts across systems and networks.
• Guide engineering, deployment, and documentation of security tools.
• Support audits, evidence requests, and compliance requirements (NIST 800-171, CMMC, NIST CSF) in partnership with GRC.
• Develop metrics and dashboards that measure organizational risk and SOC performance.
• Communicate security risks and incident updates to leadership in clear business terms.
• Ensure required security awareness training and phishing simulations are delivered effectively.
• Participate in change management, project reviews, and technology planning discussions.
• Collaborate with Technology teams to identify security gaps and strengthen overall posture.

Skills

Cybersecurity leadership

Threat detection & incident response

SOC operations

Azure/AWS

Business risk translation

Project management

Mentoring

Tools

SIEM

IDS/IPS

EDR

SOAR

Firewalls

Vulnerability management

Threat intel

Job description

• This role manages a team of Cybersecurity Analysts, oversees core security tools, and partners closely with Infrastructure, Applications, and GRC to maintain a strong, resilient security posture.
• This position is both strategic and hands‑on, driving operational excellence, threat mitigation, and continuous improvement.
• As a senior member of the team, the role requires a strong ability to lead and mentor team members through the strategy directed by senior management. In addition to technical skills, the Services Manager is results‑oriented and demonstrates effective problem‑solving and communication skills.

A Day in the Life

• Lead, mentor, and develop a team of Cybersecurity Analysts responsible for monitoring, triage, and incident response.
• Oversee daily SOC operations and ensure timely, effective handling of security alerts and requests.
• Automate repetitive tasks and implement process improvements to enhance efficiency.
• Maintain and update runbooks, SOPs, escalation workflows, and operational playbooks.
• Lead all security incident investigations, containment, and remediation activities.
• Conduct regular incident response exercises and postmortems, identifying root causes and tracking improvements.
• Stay current on emerging threats and assess ARCO’s readiness to defend against them.
• Manage and optimize security tooling (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, threat intel platforms, etc.).
• Oversee vulnerability scanning, prioritization, and remediation with Infrastructure partners.
• Support patching, hardening, and secure configuration efforts across systems and networks.
• Guide engineering, deployment, and documentation of security tools.
• Support audits, evidence requests, and compliance requirements (NIST 800-171, CMMC, NIST CSF) in partnership with GRC.
• Develop metrics and dashboards that measure organizational risk and SOC performance.
• Communicate security risks and incident updates to leadership in clear business terms.
• Ensure required security awareness training and phishing simulations are delivered effectively.
• Participate in change management, project reviews, and technology planning discussions.
• Collaborate with Technology teams to identify security gaps and strengthen overall posture.

Necessary Qualifications

• 7-10 years of cybersecurity operations/engineering experience, including monitoring and incident response.
• Experience leading people, developing talent, and managing high‑performing teams.
• Hands‑on experience with core security technologies (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, vulnerability management, threat intel, SOAR).
• Strong communication skills with the ability to translate technical issues into business risk.
• Proven ability to drive measurable improvements in SOC performance.
• Strong organizational skills with the ability to prioritize and delegate.
• Experience with Azure or AWS environments.
• Familiarity with industry frameworks (NIST 800-171, CMMC, NIST CSF).
• Preferred certifications: CISSP, CISM, SANS/GIAC, CySA+, or similar.