SOC Manager

SOC Manager

St. Louis - Brentwood, Missouri

Direct Hire

Job Description

This role manages a team of Cybersecurity Analysts, oversees core security tools, and partners closely with Infrastructure, Applications, and GRC to maintain a strong, resilient security posture.

This position is both strategic and hands-on, driving operational excellence, threat mitigation, and continuous improvement.

As a senior member of the team, the role requires a strong ability to lead and mentor team members through the strategy directed by senior management. In addition to technical skills, the Services Manager is results-oriented and demonstrates effective problem-solving and communication skills.

A DAY IN THE LIFE

Lead, mentor, and develop a team of Cybersecurity Analysts responsible for monitoring, triage, and incident response.

Oversee daily SOC operations and ensure timely, effective handling of security alerts and requests.

Automate repetitive tasks and implement process improvements to enhance efficiency.

Maintain and update runbooks, SOPs, escalation workflows, and operational playbooks.

Lead all security incident investigations, containment, and remediation activities.

Conduct regular incident response exercises and postmortems, identifying root causes and tracking improvements.

Stay current on emerging threats and assess ARCO’s readiness to defend against them.

Manage and optimize security tooling (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, threat intel platforms, etc.).

Oversee vulnerability scanning, prioritization, and remediation with Infrastructure partners.

Support patching, hardening, and secure configuration efforts across systems and networks.

Guide engineering, deployment, and documentation of security tools.

Support audits, evidence requests, and compliance requirements (NIST 800-171, CMMC, NIST CSF) in partnership with GRC.

Develop metrics and dashboards that measure organizational risk and SOC performance.

Communicate security risks and incident updates to leadership in clear business terms.

Ensure required security awareness training and phishing simulations are delivered effectively.

Participate in change management, project reviews, and technology planning discussions.

Collaborate with Technology teams to identify security gaps and strengthen overall posture.

NECESSARY QUALIFICATIONS

7-10 years of cybersecurity operations/engineering experience, including monitoring and incident response.

Experience leading people, developing talent, and managing high-performing teams.

Hands-on experience with core security technologies (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, vulnerability management, threat intel, SOAR).

Strong communication skills with the ability to translate technical issues into business risk.

Proven ability to drive measurable improvements in SOC performance.

Strong organizational skills with the ability to prioritize and delegate.

Experience with Azure or AWS environments.

Familiarity with industry frameworks (NIST 800-171, CMMC, NIST CSF).

Preferred certifications: CISSP, CISM, SANS/GIAC, CySA+, or similar.

Travel: Up to 10%