SOC Manager: Lead Detection, Incident Response & Automation

Nelnet, Inc.; Lincoln (NE); Hybrid; USD 105,000 - 140,000; Full time

Benefits offered by this job

Medical benefits

401K

Tuition reimbursement

Job summary

Nelnet, Inc. is seeking a Security Operations Center (SOC) Manager to lead a team of security analysts, incident responders, and threat intel specialists in a regulated financial services environment.

You will oversee daily monitoring, incident response, detection engineering, and automation initiatives to reduce MTTR and strengthen defenses. The ideal candidate has 3+ years in cybersecurity with 2+ years in SOC, hands-on SIEM/SOAR experience, and strong leadership and communication skills.

Qualifications

• 3+ years of cybersecurity experience with 2+ years in a Security Operations Center (SOC)
• Proven experience leading or managing a team
• Hands-on expertise with SIEM platforms including investigation, correlation rules, detection engineering, and alert tuning
• Experience with SOAR, Firewalls, and EDR platforms such as CrowdStrike, SentinelOne, or Microsoft Defender
• Familiarity with threat intelligence principles and MITRE ATT&CK framework
• Strong analytical, problem-solving, and decision-making skills

Responsibilities

• Lead and develop the SOC team and set performance goals
• Oversee daily security monitoring, alert triage, detection, and analysis of events
• Develop and maintain SOC policies, procedures, playbooks, and workflows
• Drive automation with SOAR and scripting to reduce toil and improve detection
• Coordinate incident response through containment, eradication, and recovery
• Produce and share threat intelligence and MI triage with leadership
• Collaborate with cross-functional teams on security improvements and tabletop exercises

Skills

SOC leadership

Incident response

Threat detection

Communication

Problem solving

Education

Bachelor’s degree in CS or related field

Tools

Splunk

LogRhythm

SOAR

EDR

Python

Job description

Nelnet, Inc. is seeking a Security Operations Center (SOC) Manager to lead a team of security analysts, incident responders, and threat intel specialists in a regulated financial services environment.

You will oversee daily monitoring, incident response, detection engineering, and automation initiatives to reduce MTTR and strengthen defenses. The ideal candidate has 3+ years in cybersecurity with 2+ years in SOC, hands-on SIEM/SOAR experience, and strong leadership and communication skills.