SOC Manager, Cybersecurity

The role

The SOC Manager will build and lead the SOC, including defining the operating model and hiring analysts. This person will manage detection engineering, incident response, and data loss monitoring across enterprise and production networks.

What you will do

• Build and lead the SOC
• Define the operating model including coverage hours and on-call rotation
• Hire, train and retain analysts and detection engineers
• Write and maintain playbooks, runbooks and standard operating procedures
• Own the SOC budget, tooling roadmap and vendor relationships
• Own log source coverage and detection content
• Run detection engineering and proactive threat hunts
• Serve as incident commander for security incidents
• Meet DFARS 252.204-7012 obligations
• Operate data loss monitoring for CUI and export-controlled technical data

Required qualifications

• 8+ years in security operations, incident response or threat hunting
• 4-5+ years leading a SOC or IR team
• Experience in a regulated defense, aerospace or federal environment that handles CUI or export-controlled data
• Record of leading significant incidents end to end
• Working knowledge of NIST SP 800-171, CMMC Level 2, DFARS 252.204-7012 and NIST SP 800-61
• Hands-on depth with SIEM, EDR and SOAR platforms
• Experience operating security tooling in a government community cloud or similarly restricted tenant
• Experience managing an MSSP or MDR provider
• Scripting ability in Python, PowerShell or a comparable language
• Fluency in at least one SIEM query language
• Clear writing
• Bachelor's degree in a technical field, or equivalent experience

Nice to have

• Experience building a SOC from an early stage at a fast-growing hardware or defense technology company
• Experience supporting a C3PAO assessment or DIBCAC review
• Insider threat program experience, including work with counterintelligence or DCSA
• Familiarity with NISPOM (32 CFR Part 117)
• Experience monitoring lab, manufacturing or embedded environments
• Certifications such as GCIH, GCFA, GCIA, GCDA, GNFA or CISSP
• Prior military, intelligence community or DoD cyber operations experience

Benefits

• Medical, dental, and vision benefits 100% paid for by the company
• 401k with 50% company match up to 6% of pay
• FSA
• HSA
• life insurance
• Free daily lunch while working onsite
• fully-stocked kitchen
• unlimited PTO
• casual dress code
• pre-IPO stock option grants
• relocation assistance
• annual bonuses (coming soon)

Before you apply

• Requires access to export-controlled information
• Requires a U.S. government security clearance
• U.S. citizenship is required
• Preferred Active Secret clearance, or the ability to obtain and maintain one

About the company

CHAOS Industries is a modern defense company with a multi-product portfolio powered by Coherent Distributed Networks (CDN™). Founded in 2022, the company is headquartered in Los Angeles.