SOC T1 Manager

What you will do

Lets do this. Lets change the world. In this vital role you will be responsible for managing the Cybersecurity Operations Center (CSOC) Tier 1 (T1) team within a 24/7 CSOC. The role involves acting as the subject matter expert for the CSOC T1 service, optimizing service delivery, collaborating with engineering and senior analysts, and driving improvements in processes, metrics, and documentation. Additionally, the manager will assist in incident response across its full lifecycle, from response to recovery.

Roles & Responsibilities:

• Coordinate SOC T1 Shift Leaders and oversee the daily operations of the team, providing clear direction, mentorship, and feedback.
  
• Develop and implement strategies to enhance the detection, response, and partner concern processes, ensuring alignment with organizational goals and emerging cyber threats.
  
• Manage resources effectively, balancing workload distribution and assignments to optimize performance, scalability, and response.
  
• Coordinate the security event handling processes at the Tier 1 level, ensuring that alerts are triaged, analyzed, and brought up in an efficient manner.
  
• Establish key performance indicators (KPIs) to monitor SOC T1 effectiveness and monitor team performance.
  
• Continuously assess and refine SOC T1 workflows and technologies to improve operational efficiency.
  
• Identify skill gaps and implement a continuous training program to ensure the team remains at the forefront of cybersecurity.
  
• Develop SOC T1 procedures, guides and KBs that align with organizational risk management frameworks and reduce operational risk.
  

What we expect of you

We are all different, yet we all use our unique contributions to serve patients.

Basic Qualifications:

• Master’s degree and 4 to 6 years of experience in Security Operations or related OR
  
• Bachelor’s degree and 6 to 8 years of experience in Security Operations or related OR
  
• Diploma and 10 to 12 years of experience in Security Operations or related experience
  
• A minimum of 3 years of experience in cybersecurity operations with demonstrated leadership experience.
  
• Strong understanding of cybersecurity threats, attack vectors, and the threat landscape.
  
• Experience with documenting and optimizing security processes.
  
• Ability to prioritize tasks effectively and solve problems efficiently in a diverse, global team environment.
  
• Good knowledge of Windows and/or Linux systems, including scripting languages.
  
• Effective problem-solving and task prioritization in collaborative environments.
  
• Knowledge and experience with 24/7 service delivery in cybersecurity.
  
• Proven experience with security tools and platforms relevant to CSOC operations.
  

Preferred Qualifications:

• Proficiency in Windows and/or Linux systems and scripting languages.
  
• Experience with network security, endpoint protection, or incident response
  

Professional Certifications

• CompTIA Security+ (preferred)
  
• CEH (preferred)
  
• GSEC (preferred)
  
• MTA Security Fundamentals (preferred)
  
• CISSP (preferred)
  

Soft Skills:

• Strong communication and collaboration skills to work with global teams.
  
• Ability to implement and maintain a knowledge-sharing strategy.
  
• Effective time management and multitasking skills.
  
• Problem-solving and critical thinking in high-pressure situations.
  
• A learning approach with the ability to adapt to evolving cybersecurity trends.
  
• Ability to manage multiple priorities successfully.
  
• Team oriented, with a focus on achieving team goals.
  
• Strong presentation and public speaking skills.