SOC Operations Leader — 24/7 Security & AI-Driven Response

AGS; Boulder (CO); On-site; USD 140,000 - 200,000; Full time

Job summary

AGS in Boulder, CO is seeking a Senior SOC leader to oversee analysts and engineers, providing mentorship, performance management, and staffing strategy to ensure 24/7 coverage. You will drive detection, analysis, and response to incidents, while refining SOC processes, playbooks, and KPIs.

Collaboration with internal teams will enhance threat detection and response capabilities, and you will manage SOC tools with a focus on automation and AI initiatives.

Qualifications

• 5+ years in SOC operations, with at least 3 years in a leadership role.
• Strong knowledge of SIEM, EDR, vulnerability management, and threat intelligence platforms.
• Familiarity with MITRE ATT&CK framework and incident response methodologies.
• Exposure to agentic AI tools.
• Excellent communication and leadership abilities.
• Ability to work under pressure and manage multiple priorities.

Responsibilities

• Oversee SOC analysts and engineers, providing mentorship and performance management.
• Develop staffing plans and hiring strategies to maintain 24/7 coverage.
• Ensure timely detection, analysis, and response to security incidents.
• Maintain and improve SOC processes, playbooks, and KPIs.
• Collaborate with internal teams to enhance threat detection and response capabilities.
• Manage SOC tools for optimal performance.
• Drive automation, orchestration, and AI initiatives to improve efficiency.
• Act as a point of escalation for critical incidents.
• Provide detailed reporting and insights to clients and internal stakeholders.

Skills

Leadership

Mentorship

Staffing & Hiring

SOC Operations

Incident Response

Threat Detection

Communication

Pressure Management

Tools

SIEM

EDR

Vulnerability Scanning

Threat Intelligence

MITRE ATT&CK

AI Tools

Job description

AGS in Boulder, CO is seeking a Senior SOC leader to oversee analysts and engineers, providing mentorship, performance management, and staffing strategy to ensure 24/7 coverage. You will drive detection, analysis, and response to incidents, while refining SOC processes, playbooks, and KPIs.

Collaboration with internal teams will enhance threat detection and response capabilities, and you will manage SOC tools with a focus on automation and AI initiatives.