SOC Operations Manager - Detection, Threat Intel & Automation

NelNET; Lincoln (NE); Hybrid; USD 105,000 - 140,000; Full time

Benefits offered by this job

Hybrid work option

Medical, dental, vision benefits

HSA and FSA

Job summary

Nelnet is hiring a Security Operations Center (SOC) Manager to lead a team of analysts, incident responders, and threat intelligence specialists. The role focuses on building a modern, intelligence-driven SOC with strong SIEM, SOAR, and detection engineering capabilities.

You will drive automation, incident response, and cross-functional collaboration to protect Nelnet’s critical assets in a regulated financial services environment.

Qualifications

• Bachelor’s degree or equivalent practical experience in CS or InfoSec.
• 3+ years in cybersecurity with 2+ years in an SOC.
• 1+ year of experience leading or supervising a team.
• Hands-on experience with SIEM, SOAR, EDR, and incident response.

Responsibilities

• Lead, coach, and mentor security analysts, incident responders, and threat intel specialists.
• Oversee daily security monitoring, alert triage, detection, and analysis of security events.
• Develop and maintain SOC policies, procedures, playbooks, and workflows.
• Manage and optimize SIEM, SOAR, EDR, and threat intel platforms.
• Drive detection engineering and alert tuning to reduce false positives.
• Define and report SOC metrics like MTTD/MTTR to leadership.

Skills

SOC leadership

Threat detection

Incident response

Detection engineering

Threat intelligence

MTTD/MTTR

AI-assisted investigations

Team coaching

Education

Bachelor’s degree in CS or InfoSec

Equivalent practical experience

Tools

Splunk

Google SecOps

LogRhythm

SOAR

CrowdStrike

SentinelOne

Microsoft Defender

MITRE ATT&CK

Job description

Nelnet is hiring a Security Operations Center (SOC) Manager to lead a team of analysts, incident responders, and threat intelligence specialists. The role focuses on building a modern, intelligence-driven SOC with strong SIEM, SOAR, and detection engineering capabilities.

You will drive automation, incident response, and cross-functional collaboration to protect Nelnet’s critical assets in a regulated financial services environment.