> Markdown version of [/jobs/ext/2014434-cyber-manager-ai-soc](https://www.wearedevelopers.com/jobs/ext/2014434-cyber-manager-ai-soc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Manager - AI SOC - **Company:** Deloitte T.T.L. - **Location:** San Francisco, CA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Cyber Security, Intrusion Detection and Prevention, Python (Programming Language), Security Information and Event Management, Systems Integration, Workflow Management Systems, Scripting, Data Ingestion, Cyber Warfare, Data Pipelines, Security Orchestration, Automation & Response - **Published:** August 10, 2026 - **Apply:** https://us.experteer.com/career/view-jobs/cyber-manager-ai-soc-san-francisco-ca-usa-58884353 ## About the Role and AI applications to security use cases such as triage, workflow orchestration, alert summarization, and response recommendations * Mentor junior practitioners and contribute reusable engineering assets, accelerators, and implementation patterns Tasks * Bachelor's degree or equivalent work experience * 10+ years in security operations, detection engineering, security engineering, or enterprise cyber defense * Hands-on experience designing and optimizing SIEM, SOAR, telemetry, and response workflows across enterprise platforms * Experience building and maintaining integrations, automations, and engineering workflows using Python or similar scripting language * Experience translating operational requirements into technical solutions with clients or internal stakeholders * Ability to travel 50% on average * Limited immigration sponsorship may be available Key requirements * ## Description Experteer Overview In this Manager role, you lead hands-on security engineering to modernize security operations across SIEM, SOAR, telemetry, and AI-enabled workflows. You collaborate with client teams to translate requirements into production-ready security capabilities and mentor junior engineers. You drive secure, scalable security operations deployments and reusable assets that support delivery and practice growth. This embedded, client-facing position focuses on resilience, threat detection, automation, and incident response at scale. Compensation / Benefits * Design and implement secure, scalable security operations solutions across SIEM, SOAR, telemetry, and case management platforms * Act as an embedded engineering lead with client teams to translate requirements into production-ready security capabilities * Oversee deployment of log ingestion, normalization, enrichment, routing, detection, and orchestration workflows via APIs, connectors, and data pipelines * Guide automation and AI applications to security use cases such as triage, workflow orchestration, alert summarization, and response recommendations * Mentor junior practitioners and contribute reusable engineering assets, accelerators, and implementation patterns Tasks * Bachelor's degree or equivalent work experience * 10+ years in security operations, detection engineering, security engineering, or enterprise cyber defense * Hands-on experience designing and optimizing SIEM, SOAR, telemetry, and response workflows across enterprise platforms * Experience building and maintaining integrations, automations, and engineering workflows using Python or similar scripting language * Experience translating operational requirements into technical solutions with clients or internal stakeholders * Ability to travel 50% on average * Limited immigration sponsorship may be available Key requirements * ## Related Videos - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Automated Security for the Entire SDLC](https://www.wearedevelopers.com/videos/100323-automated-security-for-the-entire-sdlc) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 137 - AI'm not sure about this](https://www.wearedevelopers.com/magazine/485-dev-digest-137-ai-m-not-sure-about-this)