Security Operations Center Manager

About Workstreet

At Workstreet , we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP.  We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one.

Get to know the Security Services Team

We are the team our clients trust to be their eyes and ears around the clock, watching over their environments even when their own teams are offline. Our MDR function spans real-time monitoring and alert triage, threat detection and investigation, and incident analysis and response guidance, using the EDR, SIEM, IPS, WAF, and firewall platforms deployed across our client base to catch what automated rules miss and help clients stop incidents before they become breaches.

We don't just close tickets. Our analysts tune detection logic, document what they see, and escalate with the context client stakeholders need to act fast. If you want to build deep, hands-on detection and investigation experience across a wide range of client environments, and be part of a team that backs each other up on every shift, you'll be in good company here.

The Opportunity

Workstreet is seeking a Security Operations Center (SOC) Manager to join our Security Services team. You will own the day-to-day operation of a 24x7 SOC that monitors client environments, and you will manage a team of 10 or more SOC analysts across rotating shifts. The SOC investigates alerts, delivers findings and remediation guidance, and escalates to client stakeholders, who carry out the actual response in their own environments.

This is a working leadership role. You will build the schedule, set the quality bar for investigations, coach analysts, and stay close enough to the tooling (EDR, firewall, IPS, WAF, and SIEM) to judge detection quality yourself. You will also be a visible point of contact for clients on service performance and escalations. The successful candidate will take ownership of shift coverage, team performance, and client-facing SOC delivery within their first 60 days.

What you'll do

Team Leadership

●       Lead, coach, and develop a team of 10 or more SOC analysts, with regular one-on-ones, clear goals, and honest performance feedback.

●       Build and maintain the 24x7 shift schedule so every shift has the right coverage and skill mix, including nights, weekends, and holidays.

●       Recruit, interview, and onboard new analysts, and run a training program that gets them investigating independently quickly.

●       Set career paths and development plans for analysts, and support certification and training goals.

●       Manage burnout and retention risks that come with round-the-clock operations.

SOC Operations

●       Own SOC performance against client SLAs, tracking metrics such as time to acknowledge, time to investigate, escalation quality, and false positive rate.

●       Review investigations and escalations for accuracy, completeness, and clarity before they reach clients, and coach analysts on gaps.

●       Oversee monitoring across EDR, firewall, IPS, WAF, and SIEM platforms, and prioritize detection tuning to reduce noise and close coverage gaps.

●       Maintain SOC runbooks, playbooks, and shift handoff procedures so open investigations never stall between shifts.

●       Run post-incident reviews and drive lessons learned back into detections, procedures, and training.

Client Management

●       Serve as the senior point of contact for clients on SOC service delivery, escalations, and incident communications.

●       Lead recurring service reviews that cover alert volume, notable incidents, trends, and recommended improvements.