If you are an internal associate, please login to Workday and apply through Jobs Hub.
Job Purpose
Security Operations Center Manager is responsible for ensuring effective incident detection and response. Strong technical leader who will assess existing and evolving threats to the company's information systems, develop staff, mature processes, and continually orient the capabilities of the organization to address the highest priority risks while integrating industry leading solutions into operational processes.
Essential Responsibilities
Plans and organizes daily SOC Operations, inspects staff execution of defined processes, and ensures complete and accurate reporting of key performance indicators (KPIs).
Provides thought leadership on new capabilities required for effective SOC operation by staying current with the latest attacker techniques and defensive countermeasures.
Mentors, motivates and develops staff based on the needs of the team and the strengths of each analyst. Identifies talent gaps and recruits effectively to ensure those capabilities are added to the team.
Continually tests and measures the effectiveness of the team, identify improvements, and implement them. Ensures that all necessary documentation is complete and followed.
Validates the effectiveness of security tools including sensors, scanners, log collection, correlation and search, and tune as necessary.
Continuously evaluates and refines SOC processes and procedures to ensure effectiveness, efficiency, and alignment with evolving threats and business priorities.
Works with the Incident Response team to coordinate SOC resources during incident response.
Drives automation and orchestration of SOC workflows through SOAR, playbooks, and runbooks to reduce response times and analyst workload.
Supports regulatory, audit, and compliance requirements related to security monitoring and incident response.
Ensures appropriate shift coverage, staffing levels, and escalation paths to maintain continuous monitoring and response capability.
Operationalizes threat intelligence within SOC monitoring and detection to proactively identify and respond to emerging threats.
Utilizes AI as a standard part of SOC operations, embedding it into detection engineering and analysts' daily workflows to continuously improve detection, investigation, response, and analyst efficiency.
Other Duties
Provides after hours on call assistance as needed.
Performs other duties and/or projects as assigned.
Knowledge, Skills and Abilities
Demonstrated knowledge of SIEM tools and processes at an enterprise level is required.
Significant experience with enterprise networking, operating system configurations, identity management, authentication, authorization and logging.
Strong working knowledge and experience with multi-faceted forensics investigations, system vulnerability assessments, and security gap identification.
Thorough understanding and application of security concepts, protocols, and methodologies across multiple operating environments.
Scripting, database query languages and deployment of software in an enterprise environment.
Ability to manage staff and administer personnel actions, including performance and salary reviews, hiring, corrective action, and terminations.
Strong communication skills, including the ability to effectively communicate technical issues both verbally and in writing.
Excellent analytical and problem-solving skills.
Qualifications
Bachelor's Degree required.
7+ years Information Security specific experience required.
3+ years management experience required.
CISSP Certified Information Systems Security Professional preferred.
Additional relevant industry certification(s) preferred.
Jackson is proud to be an equal opportunity workplace. The Company subscribes to and endorses federal and state laws and regulations relating to equal employment opportunity for all persons without regard to race, color, religion, gender, age, national origin, legally-recognized…