> Markdown version of [/jobs/ext/4622783-senior-cyber-security-manager-csirt-soc](https://www.wearedevelopers.com/jobs/ext/4622783-senior-cyber-security-manager-csirt-soc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cyber Security Manager- CSIRT & SOC - **Company:** ONTRAC, INC. - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $156,000 - $234,000 - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Microsoft Azure, Cloud Computing Security, Cyber Security, Intrusion Detection and Prevention, PCI Data Security Standards, Security Information and Event Management, Mitre Att&ck, Mttr, Cyber Threat Analysis, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, CIS Benchmarks, Cyber Warfare, Security Orchestration, Automation & Response - **Published:** November 7, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=f931a1f22f5be6fa ## About the Role Are you eager to join a dynamic and expanding company where you can both learn and make a meaningful impact? If you possess a strong sense of empathy, enjoy assisting others, thrive in a fast-paced environment, and excel at problem-solving, we encourage you to apply today to connect with a recruiter!, * Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field, Master's degree preferred. * 10 years of progressive, direct hands-on cybersecurity experience and 5 years of leadership experience managing Security Operations, Incident Response, Cyber Defense, and SOC teams. * Demonstrated experience building and maturing SOC capabilities, incident response programs, and detection engineering functions. * Experience developing cybersecurity operational metrics, executive reporting, and performance dashboards, including MTTD, MTTR, KPIs, and KRIs. * Proven success implementing SIEM, EDR, SOAR, and automated or AI-assisted response capabilities. * Experience managing 24x7 staffing models, budgets, and third-party security vendors or MSSP's. * Preferred certifications include CISSP, CISM, GIAC GCIH, GIAC GCIA, and GMON. * Cloud security certifications such as Azure Security Engineer, Associate or Microsoft Cybersecurity Architect Expert preferred. * It is the responsibility of every position to understand and adhere to the security guidelines outlined in OnTrac's Acceptable Use policy and to conduct their activities accordingly. ## Description A summary of key responsibilities for the role is outlined below. Additional duties may be assigned as needed to support business objectives. * SOC leadership, structure & coverage: Lead daily SOC/ARC monitoring, alert triage, investigations, and incident response; manage analysts, shift leads, and incident handlers across all tiers; define Tier 1/2/3 responsibilities and escalation criteria; and establish a sustainable coverage model using follow-the-sun, dedicated shifts, or hybrid on-call rotations. * Workforce planning & operational readiness: Ensure qualified staffing and service coverage while developing organizational and workforce plans that support current and future security operations requirements. * Incident response & crisis management: Build and mature incident response procedures, runbooks, and playbooks; lead cyber incident response end-to-end; coordinate countermeasures and mitigating controls; and serve as the primary escalation point for complex investigations and significant incidents. * Incident communication, exercises & lessons learned: Coordinate high-severity incident response across IT, Legal, Communications/PR, and executive leadership; conduct post-incident reviews; lead technical and executive tabletop exercises, cyber simulations, and readiness drills; and track corrective, preventive, and remediation actions to closure. * Detection engineering, threat hunting & monitoring effectiveness: Develop the detection engineering and proactive threat-hunting programs; perform quality control of detection and alerting mechanisms; tune SIEM, EDR, and other security technologies to improve efficacy and reduce false positives; and align detection use cases with MITRE ATT&CK, threat intelligence, emerging threats, and organizational risks. * Metrics, dashboards & performance management: Establish and report MTTD, MTTR, MTTC, detection coverage, alert fidelity, incident volume, severity trends, and analyst productivity; create SOC/ARC KPIs and KRIs; and develop executive dashboards that communicate threat trends, operational performance, and program maturity. * Automation, AI & continuous improvement: Optimize security tools, processes, and SIEM/SOAR platforms to reduce analyst fatigue and accelerate response; implement AI/ML-supported triage, correlation, and investigation capabilities; define the appropriate division between automated action and human judgment; and monitor emerging agentic AI and autonomous response technologies. * Governance, risk & compliance: Align security operations and incident handling with applicable regulatory requirements and frameworks, including NIST CSF, NIST SP 800-61, MITRE ATT&CK, CIS Controls, ISO 27001, PCI-DSS, SOX, and HIPAA, and support related audits, assessments, and evidence-collection activities. * Budget, vendors & service performance: Manage the SOC operating budget across tools, staffing, and managed services; oversee MSSPs, MDR providers, incident response retainers, and security technology partners; and define and enforce vendor and contract SLAs. * Talent development & security culture: Recruit, coach, mentor, and develop security operations personnel at all levels; establish career paths, training programs, skills assessments, and succession plans; and foster accountability, collaboration, innovation, continuous learning, and high performance. Paving your way to your success: * You lead the strategy and execution of major cybersecurity projects that affect multiple areas of the organization. * You set operational objectives, policies, procedures, and work plans while delegating responsibilities effectively across the team. * You develop, adapt, and implement policies that strengthen immediate security operations and may influence the broader organization. * You engage effectively with frontline and senior management on issues spanning multiple functions, departments, and customers. * You use strong persuasion and sound judgment to navigate sensitive, complex situations while maintaining productive relationships.