SOC Manager

You will lead the operational delivery and continuous improvement of Accesa’s Security Operations Center services, working across SOC Operations, Security Engineering, Cloud & Infrastructure teams, and client stakeholders. Your focus will be on delivering reliable security services, strengthening detection and incident response capabilities, and improving SOC efficiency through better processes, tooling, and automation.

Responsibilities

• Lead SOC Operations: Oversee day-to-day security monitoring, alert triage, investigations, escalations, and incident response, ensuring effective service delivery and appropriate coverage across SOC operations.
• Drive Effective Incident Response: Act as an escalation point for critical security incidents and ensure effective investigation, containment, remediation, and follow-up across L1/L2 teams and specialised Security Engineering functions.
• Own Service Performance: Monitor SLAs, KPIs, response times, incident trends, and service quality while leading operational reviews and maintaining clear communication with clients and stakeholders.
• Strengthen Detection & Automation: Improve detection quality, alert prioritisation, and security use cases while driving automation through SIEM, EDR/XDR, SOAR, and related security technologies.
• Lead & Grow the SOC Team: Mentor and develop SOC Analysts and Security Engineers, supporting knowledge sharing, technical development, recruitment, onboarding, and effective collaboration across security teams.
• Evolve Security Services: Continuously improve SOC processes, tooling, operating models, and automation while contributing to new customer transitions, service design, security workshops, and the development of Accesa’s Managed Security Services

Must Have

• Strong professional experience in Cyber Security and Security Operations, with hands-on experience in a SOC environment
• Experience leading or coordinating operational security teams and managing security incidents and escalations
• Strong knowledge of security monitoring, incident response, SIEM, EDR/XDR, SOAR, detection engineering, and security automation
• Understanding of threat intelligence, threat hunting, cloud, identity, endpoint, network, and infrastructure security
• Experience managing operational SLAs, KPIs, service reporting, and managed security services
• Good understanding of security frameworks and standards such as MITRE ATT&CK, NIST Cybersecurity Framework, incident response frameworks, and ISO 27001
• Strong analytical and decision-making skills, with the ability to manage priorities during high-pressure security situations
• Strong client and stakeholder communication skills
• Fluent English, both written and spoken
• ⁠Regular use of AI tools to improve productivity, automate or reduce repetitive work, support decision-making, and deliver higher-quality outcomes.
• Ability to use AI tools responsibly by structuring effective prompts, critically validating outputs, understanding limitations, and taking ownership of the final result

Nice to Have

• Experience building, scaling, or operating a 24/7 SOC or Managed Security Service
• Experience with Microsoft Sentinel, Microsoft Defender XDR, Palo Alto XSOAR/XSIAM, or similar security platforms
• Experience with detection engineering, SOAR automation, and scripting with Python or PowerShell
• Experience with Microsoft Azure, AWS, or GCP
• Experience supporting RFPs, service transitions, and managed security service onboarding
• Certifications such as CISSP, CISM, GIAC, Microsoft Security certifications, or equivalent
• German language skills