SOC Modernization Lead: AI-Driven Security Operations

New York Technology Partners; Chicago (IL); On-site; USD 120,000 - 190,000; Full time

Job summary

New York Technology Partners in Chicago is seeking an experienced SOC leader to drive modernization and standardize end-to-end SOC workflows. You will partner with the Director of Information Security to map a modernization roadmap and deliver measurable improvements across people, process, and technology.

Responsibilities include implementing AI-assisted SOC capabilities, coordinating SIEM/EDR/SOAR integrations, and defining guardrails, metrics, and governance.

Qualifications

• 5+ years in security operations / SOC engineering or incident response.
• Strong understanding of SOC workflows and escalation/handoff patterns.
• Experience with SIEM/EDR ecosystems and API/webhook integrations.
• Proven ability to drive operational change with playbooks, metrics, and training.
• Strong written communication and stakeholder management.

Responsibilities

• Build and execute a SOC modernization roadmap with the Director of Information Security.
• Standardize SOC workflows: intake, triage, investigation, escalation, closure.
• Establish operational rhythms: queue health checks, weekly ops review, monthly metrics.
• Lead AI-assisted SOC capabilities and automation initiatives.
• Oversee tooling integrations across SIEM/EDR/SOAR and cloud telemetry.
• Define KPIs and drive continuous improvement via reviews and post-case learnings.

Skills

SOC operations experience

SOC workflows & escalation

SIEM/EDR integration

operational change management

written communication & stakeholder mg

Tools

SIEM/EDR ecosystems

APIs & webhooks

SOAR tooling

Job description

New York Technology Partners in Chicago is seeking an experienced SOC leader to drive modernization and standardize end-to-end SOC workflows. You will partner with the Director of Information Security to map a modernization roadmap and deliver measurable improvements across people, process, and technology.

Responsibilities include implementing AI-assisted SOC capabilities, coordinating SIEM/EDR/SOAR integrations, and defining guardrails, metrics, and governance.