As a leader within the Managed Security Services practice, the successful SOC Manager will direct a centralized and geographically disbursed team of security operations personnel, primarily based in our El Salvador location, ensuring consistency of service delivery and a smooth transition between shifts. These individuals will also work across multiple client accounts within a wide variety of industries. Reporting to the Global SOC Operations Lead, this role supports our professionals by instilling a mutually respectful team environment that allows for them to operate at their best and integrate their career with their personal life. SOC Managers typically have 5-7 years of experience in the following areas:

• Overseeing the assigned shift and continually mature the security operations center activities

• Providing consolidated reporting and dashboards to operational leadership

• Working with the recruiting team to conduct technical interviews of potential analysts

• Demonstrating the ability to manage security operations teams, identify necessary skill sets and opportunities for continued team member professional growth

• Providing leading practice recommendations in security operations, incident response, vulnerability management and automation

• Understanding native monitoring tools available from common cloud platforms

• Supporting simple to complex enterprise managed security solutions for a variety of business use cases and requirements

• Guiding and mentoring client counterparts through the ongoing operational activities

• Mentoring and directing analysts, conducting quality reviews of their activities, providing direction, and serving as technical lead

• Demonstrated ability to inspire, mentor, and retain local talent, fostering a positive team culture that builds long-term engagement.

• Ability to act as a trusted liaison between El Salvador SOC staff and El Salvador and US leadership, facilitating transparent communication, feedback, and alignment on goals, priorities, and challenges.

• Strong cross-cultural communication skills, with fluency in both English and Spanish, to bridge gaps and foster collaboration.

• Ability to lead change initiatives focused on continuous improvement and measurable impact.

Required Qualifications:

• Bachelor's degree or higher

• 7+ years of related work experience, specifically 5+ years of security operations center experience operating in the cloud and/or on premise

• Proven experience leading security operations center teams including interacting with external client teams and supporting operational protocols

• Experience using the ServiceNow suite for overall security operations workflow management

• Utilizing SIEM technologies such as Splunk, LogRhythm, Azure Sentinel, and StellarCyber

• Experience building and maturing security operation center capabilities and operations

• Experience serving complex architectures and environments (cloud, on-prem or hybrid)

• Experience with various automation platforms such as security orchestration and automated response (SOAR) tools

• As this role will be client facing during incident investigations, being able to communicate effectively, both in writing and verbally in English is mandatory

• Ability to interact effectively with internal and external resources at all organizational levels

• Excellent project management, organization, and follow-up skills

• Strong critical thinking and problem-solving skills

Experience with the following platforms is preferred:

• Common cloud platforms – Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform

• SOAR tools such as: Torq, Phantom, Forescout, etc.

• Proficiency with AWS Security Center and popular security services (IAM, Key Vault, etc.)

• Knowledge and proficiency with popular cloud security services (VPC, RDS, IAM, WAF, IDS/IPS, AS3, SQS, SNS, CloudWatch, CloudTrail, Inspector, Config, etc.)

• Vulnerability tools such as: Kenna, Tenable, Qualys, etc.

• Threat intelligence tools such as Recorded Future and ThreatConnect

• Endpoint detection and response tools such as: SentinelOne, Crowdstrike, Defender, etc.

• Microsoft 365

• Cloud access service brokers such as Netskope, ZScaler, McAfee, Forcepoint

• Containers (Kubernetes, Docker) and security leading practices