> Markdown version of [/jobs/ext/2015502-cyber-manager-ai-soc](https://www.wearedevelopers.com/jobs/ext/2015502-cyber-manager-ai-soc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Manager - AI SOC

- **Company:** Deloitte T.T.L.
- **Location:** Costa Mesa, CA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Cyber Security, Intrusion Detection and Prevention, Python (Programming Language), Security Information and Event Management, Systems Integration, Scripting, Data Ingestion, Information Technology, Cyber Warfare, Data Pipelines, Security Orchestration, Automation & Response
- **Published:** August 10, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/cyber-manager-ai-soc-costa-mesa-ca-usa-58884362

## About the Role

security operations use cases like triage, workflow orchestration, alert summarization, and response recommendations * Mentor junior practitioners and contribute reusable engineering assets and implementation patterns Tasks * Bachelor in Computer Science * 10+ years in security operations, detection engineering, security engineering, or enterprise cyber defense * Hands-on experience designing and optimizing SIEM, SOAR, telemetry, and response workflows across enterprise platforms * Experience building and maintaining integrations and automations using Python or similar scripting language * Experience translating operational requirements into technical solutions with client/internal stakeholders * Ability to travel 50% on average * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program * reasonable accommodations for disabilities

## Description

Experteer Overview In this role, you will lead hands-on design and deployment of security operations across SIEM, SOAR, telemetry, and automation. You'll work embedded with client teams to translate needs into production-ready security capabilities and trusted engineering outcomes. You will guide AI-enabled workflows, detection engineering, and data pipelines, while mentoring junior practitioners. You'll operate in a fast-paced, client-facing environment to strengthen operational resilience and security readiness. Compensation / Benefits * Lead design and implementation of scalable security operations solutions across SIEM, SOAR, telemetry, case management, and response platforms * Serve as an embedded engineering lead to translate client workflows into production-ready security capabilities * Oversee deployment of log ingestion, normalization, enrichment, routing, detection, and orchestration workflows via APIs, connectors, and data pipelines * Guide automation and AI applications for security operations use cases like triage, workflow orchestration, alert summarization, and response recommendations * Mentor junior practitioners and contribute reusable engineering assets and implementation patterns Tasks * Bachelor in Computer Science * 10+ years in security operations, detection engineering, security engineering, or enterprise cyber defense * Hands-on experience designing and optimizing SIEM, SOAR, telemetry, and response workflows across enterprise platforms * Experience building and maintaining integrations and automations using Python or similar scripting language * Experience translating operational requirements into technical solutions with client/internal stakeholders * Ability to travel 50% on average * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program * reasonable accommodations for disabilities


## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Automated Security for the Entire SDLC](https://www.wearedevelopers.com/videos/100323-automated-security-for-the-entire-sdlc)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)