SOC Manager

Qnity; Wilmington (DE); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive pay

Benefits package

Job summary

Qnity in Wilmington, Delaware, is seeking a seasoned SOC Manager to lead the Security Operations Center, oversee incident response, threat detection, and MSSP management. The role requires a hands-on technical leader who can guide people, processes, and technologies to drive measurable security outcomes.

You'll develop detection use cases, tune SIEM rules, and drive automation with SOAR while mentoring analysts. Strong experience with Microsoft Sentinel and Defender for Endpoint is preferred.

Qualifications

• 6+ years of experience in security operations or incident response.
• 3+ years in leadership within SOC or IR teams.
• Proven ability to lead complex investigations.
• Hands-on with SIEM and SOAR technologies.

Responsibilities

• Lead incident response and act as incident commander for high-severity events.
• Oversee SOC operations and MSSP partnerships.
• Develop threat detection content and MITRE ATT&CK alignment.
• Drive automation to improve response times.
• Mentor analysts and report on SOC metrics.

Skills

Security Operations

Incident Response

Threat Detection

Leadership

Tools

MS Sentinel

Defender for Endpoint

KQL

Job description

Are you looking to power the next leap in the exciting world of advanced electronics? Do you want to help solve problems that drive success in the rapidly evolving technology and connectivity landscape? Then bring your problem-solving, passion, and creativity to help us power the next leap in electronics.

At Qnity, we’re more than a global leader in materials and solutions for advanced electronics and high-tech industries – we’re a tight-knit team that is motivated by new possibilities, and always up for a challenge. All our dedicated teams contribute to making cutting-edge technology possible. We value forward-thinking challengers, boundary-pushers, and diverse perspectives across all our departments, because we know we play a critical role in the world enabling faster progress for all. Learn how you can start or jumpstart your career with us.

The SOC Manager is responsible for leading the organization's Security Operations Center, overseeing incident response, security monitoring, threat detection, MSSP management, and continuous improvement of security operations capabilities. This role requires a hands-on technical leader who can effectively manage people, processes, and technology while driving measurable security outcomes.

Key Responsibilities

• Lead the investigation, containment, and resolution of cybersecurity incidents, serving as Incident Commander for high-severity events.
• Manage day-to-day SOC operations, including oversight of external MSSP partners and service delivery performance.
• Develop, tune, and maintain threat detection use cases and SIEM correlation rules aligned to industry frameworks such as MITRE ATT&CK.
• Drive automation initiatives through SOAR technologies to improve operational efficiency and response times.
• Lead threat hunting, forensic investigations, and root cause analysis activities.
• Establish and report on key SOC performance metrics, including MTTD, MTTR, detection coverage, and incident trends.
• Evaluate and implement AI-driven security capabilities to enhance detection and response processes.
• Mentor analysts and provide technical leadership across the security operations function.

Required Qualifications

• 6+ years of progressive experience in Security Operations, Incident Response, Threat Detection, or Cybersecurity Operations.
• 3+ years of leadership, supervisory, or technical lead experience within a SOC or incident response environment.
• Demonstrated experience leading complex cybersecurity incident investigations.
• Strong hands-on experience with Microsoft Sentinel, Microsoft Defender for Endpoint, and Kusto Query Language (KQL).
• Experience managing security vendors, MSSPs, and operational service delivery.
• Strong project management, organizational, and communication skills.

Demonstrated Capability Requirements

Candidates must demonstrate the ability to:

• Independently lead major security incidents through containment, recovery, and post-incident analysis.
• Develop and optimize security detections, threat hunting activities, and SIEM content.
• Analyze security data and translate findings into actionable risk reduction strategies.
• Manage competing operational priorities and drive projects to successful completion.
• Experience in identifying, designing, and implementing automation solutions that improve Security Operations efficiency.
• Experience leveraging SOAR platforms, scripting, APIs, workflow automation, or low-code/no-code technologies to eliminate repetitive manual tasks and streamline security processes.
• Communicate effectively with technical teams, leadership, and business stakeholders.
• Deliver measurable improvements in SOC effectiveness, operational efficiency, and security outcomes.

Preferred Qualifications

• CISSP, GCIH, GCFA, GNFA, SC-200, SC-100, or equivalent certifications.
• Experience with industrial, manufacturing, OT, or Microsoft Defender for IoT environments.

Success Factors

Successful candidates consistently demonstrate technical leadership, sound judgment, strong analytical skills, operational accountability, and the ability to deliver results in fast-paced security environments.

Note: Qualification for this position is based on demonstrated capability and successful application of required skills and experience, not solely on job title, tenure, or certifications.

Qnity is an equal opportunity employer. Qualified applicants will be considered without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability or any other protected class. If you need a reasonable accommodation to search or apply for a position, please visit our Accessibility Page for Contact Information.

Benefits

• Qnity offers a comprehensive pay and benefits package. To learn more visit the Compensation and Benefits page.

We use Artificial Intelligence (AI) to enhance our recruitment process.