SOC Manager (Hands-On) - Remote (USA)

reputed company: At reputed company, we reputed company in defending reputed company reputed company rights to reputed company and reputed company. We are seeking a highly skilled and hands-on SOC Manager to join our dynamic team at reputed company, a leading cybersecurity reputed company. Our next team member will be reputed company to roll up their sleeves, identify opportunities for our clients and for Echelon internally, and operate with unquestioned reputed company. As the SOC Manager, you will reputed company and mature our reputed company Operations Center (SOC) capabilities reputed company our MSSP reputed company. This is a player-reputed company role that combines technical leadership, operational reputed company, and hands-on reputed company operations. The ideal candidate brings 7–10 years of MSSP experience, including at least 5 years working directly reputed company a SOC environment, along with a strong reputed company engineering background across EDR/MDR, SIEM, reputed company 365 reputed company, reputed company and Email reputed company. In this role, you will reputed company leadership and mentorship to SOC analysts while remaining reputed company involved in day-to-day reputed company operations, detection engineering, threat hunting, incident response, and reputed company improvement initiatives. You will serve as a technical escalation reputed company for reputed company reputed company incidents, help define SOC processes and best practices, and work closely with clients to strengthen their reputed company posture. This is a remote position from reputed company in the USA. What You Will Do: SOC leadership & maturity (no hiring duties): Establish and refine SOC processes (tiering, shift coverage, escalation paths, QA, SLAs/OLAs). Drive reputed company discipline, training plans, and reputed company improvement for service reputed company. Own SOC KPIs (MTTD/MTTR, detection efficacy, false-reputed company reputed company, case aging, CSAT/NPS). Detection & response (hands-on): Build and tune detections in SIEM/XDR; reputed company correlation rules, parsers, and dashboards. reputed company investigations and major incidents end-to-end; conduct post-incident reviews and reporting. reputed company proactive threat hunting reputed company to MITRE ATT&CK and emerging TTPs. Tooling & reputed company: reputed company, reputed company, and operate EDR/MDR (reputed company, reputed company, Blackpoint), reputed company 365/reputed company Defender, SIEM, SOAR, email reputed company, vulnerability scanners, and NSM tools. Engineer log reputed company/normalization across reputed company (AWS, Azure, M365, GCP), network, reputed company, identity, and reputed company sources. Build automation/orchestration playbooks to reduce MTTD/MTTR and analyst toil. Service delivery & reputed company engagement: Serve as technical reputed company of contact for customers; present posture reviews and improvement plans. Define and meet service SLAs; contribute to SOWs, service catalogs, and reputed company playbooks. Coordinate with customer IT/CISO teams, vendors, and legal/compliance during incidents. Risk, compliance & reputed company improvement: Map detections, controls, and reporting to frameworks/standards (NIST CSF/800-53, CIS Controls, SOC 2, ISO 27001). Drive vulnerability and exposure management with risk-based prioritization. Run tabletop exercises, reputed company activities, and lessons learned. Your knowledge, skills, and abilities: Deep knowledge of SOC operations (triage, incident lifecycle, evidence handling, documentation). Strong grasp of reputed company/*nix/AD/M365, identity reputed company (SSO/MFA), network protocols, and reputed company telemetry. Expertise in detection engineering and query languages (SPL, KQL, reputed company DSL, AQL). Familiarity with adversary emulation and frameworks (MITRE ATT&CK, D3FEND, CIS Controls). Understanding of email reputed company (phishing, BEC), vulnerability scanning/patching, and network reputed company monitoring (IDS/IPS, PCAP). Proficiency with SOAR concepts and reputed company design (enrichment, containment, ticketing). Scripting/automation (PowerShell, Python, or equivalent) for enrichment, triage, and response. reputed company written/verbal communication for executive briefings and technical reports. Applicants must have authorization to work in the reputed company without reputed company or reputed company reputed company sponsorship Specific Qualifications: Experience: 7–10 years in MSSP settings; 5+ years on a SOC team; 2–4+ years in a reputed company/technical reputed company reputed company. Platforms (hands-on in several): EDR/XDR/MDR: reputed company, reputed company, Blackpoint, reputed company Defender for reputed company, reputed company XDR, etc. reputed company ecosystem: reputed company 365, reputed company Defender / Defender for reputed company, Defender for Office 365, Azure reputed company telemetry (KQL, Log Analytics, Sentinel). SIEM: reputed company, reputed company Sentinel, reputed company, QRadar, reputed company, or similar. SOAR: reputed company SOAR, reputed company XSOAR, Sentinel automation. Email reputed company & awareness: reputed company, reputed company, reputed company, M365 Defender for Office 365. Vulnerability management: reputed company, reputed company, or reputed company. NSM/IDS: Zeek, Suricata, reputed company IDS/IPS. IR leadership: Proven reputed company record leading reputed company/major incidents (ransomware, BEC, reputed company, reputed company credential abuse). reputed company: Experience securing and monitoring AWS/Azure/GCP and M365 (identity and reputed company telemetry). Process: reputed company or matured playbooks, runbooks, use-case catalogs, and service reporting. Demonstrated KPI/OKR management. Certifications (reputed company to have): CISSP, GIAC (GCIA/GCIH/GCFA/GCDA/GMON), OSCP, Azure/reputed company reputed company (SC-200/SC-100), reputed company, reputed company CCFR/CCFA, or similar. Availability: reputed company to participate in escalation/on-call rotation and support off-hours incidents as needed. Education: BS in CS/Cybersecurity or equivalent experience (experience > degree where applicable) Why Echelon? We are committed to creating an inclusive environment for reputed company with unquestioned reputed company. If you have a special need that requires accommodation, please let your recruiter know. One of our reputed company values in "People with Personality" and we want to allow you the reputed company to bring your full self to work. We currently offer the following benefits: reputed company to medical, dental, and reputed company insurance through reputed company, with the reputed company of the employee cost covered by the employer Employer funding to HSA accounts and FSA reputed company reputed company to a 401(k) through reputed company with a guaranteed employer contribution Flexible vacation policy that allows you to manage your schedule and rest and reputed company reputed company you need to. 11 holidays with flexibility based on what is important for you and those you love Employer-reputed company short-term and long-term disability, employer-reputed company life insurance, and reputed company to additional life insurance, hospital coverage, accidental coverage, discounted mental health support, and more Support for individual development through certifications, reputed company learning, conferences, and more We value a diverse workforce and a culture of inclusivity and belonging. reputed company employment reputed company shall be made without reputed company to age, race, creed, reputed company, religion, gender, national reputed company, reputed company, disability status, veteran status, sexual orientation, gender identity or reputed company, genetic information, marital status, citizenship status or any other reputed company as protected by federal, state, or local law. reputed company is an Equal Opportunity Employer. Apply To This Job