SOC Manager – Security Operations Center Lead

About the role

Mobiz is seeking a SOC Manager to lead its Security Operations Center. The role combines hands‑on incident response with strategic oversight of detection engineering and client security reporting.

Key responsibilities

• Own the full threat lifecycle – triage, investigation, containment, eradication and post‑incident review for all client tenants.
• Act as senior incident response authority for P1 incidents, coordinating NOC, engineering, legal and client communications.
• Direct and quality‑review Tier 1 and Tier 2 analyst work, ensuring complete and defensible investigation documentation.
• Lead post‑incident reviews, track remediation actions and continuously improve IR playbooks for ransomware, BEC, identity compromise, data exfiltration and insider threats.
• Develop and maintain detection rules and engineering processes within the Microsoft security stack and SIEM platform.
• Operationalize threat intelligence and produce client‑facing security posture briefings.

Required profile

• Proven hands‑on incident response experience in a managed‑services environment.
• Strong familiarity with the Microsoft security ecosystem (Azure Sentinel, Microsoft Defender, Microsoft 365 security).
• Track record of building and leading high‑performing SOC teams.
• Excellent communication skills for client briefings and cross‑functional coordination.

Required skills

• SIEM platforms (e.g., Azure Sentinel)
• Microsoft Defender for Endpoint
• Microsoft 365 security tools
• Incident response methodologies
• Threat intelligence platforms
• Ransomware and BEC detection techniques