[All remote jobs](https://jobicy.com/jobs.md)[![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg)](https://jobicy.com/company/huntress.md)[Huntress](https://jobicy.com/company/huntress.md) # Manager, Security Operations Center – EMEA Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move. [Apply for this job](#job-application)[View company](https://jobicy.com/company/huntress.md)ShareRemote from[UK](https://jobicy.com/job-region/uk.md)SalaryGBP 94,500–115k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceDirectorPublished12 Oct 2026Apply before11 Nov 2026Listing views34Application actions0Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. AI Summary ## The role, at a glance. Huntress is hiring a Security Operations Center Manager to lead its remote UK SOC function within a global 24/7 managed detection and response environment. The manager will oversee analyst performance, shift coverage, quality assurance, process maturity, training, and service-level objectives. The role requires substantial hands-on security operations expertise, particularly Windows forensics, incident response, malware analysis, threat hunting, detection engineering, and automation. It also partners with Product, Support, Sales, Marketing, and other security teams to scale operations and operationalize new services. Success depends on people leadership, data-driven operational management, and clear communication with technical and nontechnical stakeholders. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 5/5RelaxedFast-paced ### Autonomy Level 5/5GuidedFull ownership ### Communication Load 5/5IndependentCollaborative AI insightThis is a senior operational leadership role responsible for reliable 24/7 SOC delivery, analyst development, service-level performance, and cross-functional process improvements. It combines deep incident-response expertise with high-stakes people management and global operational accountability. ## Salary analysis Estimated compensation compared with the broader UK market for similar roles. Estimated job medianBelow market£104,750UK market range£125k–£175k0£193k AI insightThe disclosed base-salary range is £94,500–£115,000 yearly, with a midpoint of £104,750 GBP; bonus and equity are additional but not quantified. For US-market comparison only, a senior SOC Manager with global 24/7 operations and incident-response leadership responsibilities is commonly estimated at approximately $125,000–$175,000 USD annually, varying by location, company size, and on-call scope. ## Core skills Skills and capabilities most closely associated with this opportunity. [Security Operations Center (SOC)](https://jobicy.com/jobs?search_keywords=Security%20Operations%20Center%20SOC.md)[SOC Management](https://jobicy.com/jobs?search_keywords=SOC%20Management.md)[Incident Response](https://jobicy.com/jobs?search_keywords=Incident%20Response.md)[Digital Forensics](https://jobicy.com/jobs?search_keywords=Digital%20Forensics.md)[Windows Forensics](https://jobicy.com/jobs?search_keywords=Windows%20Forensics.md)[Malware Analysis](https://jobicy.com/jobs?search_keywords=Malware%20Analysis.md)[Threat Hunting](https://jobicy.com/jobs?search_keywords=Threat%20Hunting.md)[Detection Engineering](https://jobicy.com/jobs?search_keywords=Detection%20Engineering.md)[Security Automation](https://jobicy.com/jobs?search_keywords=Security%20Automation.md)[People Leadership](https://jobicy.com/jobs?search_keywords=People%20Leadership.md) Sample interview questionsHow would you improve SOC throughput while protecting analysts from burnout in a 24/7 environment?I would begin with workload, queue-age, escalation, quality, and schedule data to identify bottlenecks and uneven demand. I would standardize triage playbooks, automate repeatable enrichment tasks, set clear escalation thresholds, and balance coverage through capacity planning. I would pair these changes with regular one-to-ones, rotation planning, training time, and measurable wellbeing signals to ensure efficiency does not come at the expense of sustainable performance. Describe how you would manage an incident that misses an internal response-time objective. I would ensure the incident is contained and communicated appropriately first, then run a blameless review focused on timeline, detection fidelity, staffing, tooling, handoffs, and decision points. I would document corrective actions with accountable owners and deadlines, such as playbook changes, automation, training, or revised escalation rules. I would then track the relevant metrics to confirm the improvement prevents recurrence. How do you develop analysts across forensics, incident response, threat hunting, and detection engineering? I use a competency framework that defines expectations by level and specialization, then create individual development plans during recurring one-to-ones. Development can include shadowing, case reviews, tabletop exercises, lab work, mentorship, and measured ownership of detections or automation projects. I connect training outcomes to observable improvements in investigation quality, response speed, and promotion readiness. How would you maintain consistent operations across regional SOC teams? I would establish common operating procedures, severity definitions, quality standards, handoff requirements, and core metrics while allowing documented local adjustments where needed. Regular manager syncs, shared incident retrospectives, calibration sessions, and cross-region training would keep decisions and analyst expectations aligned. I would monitor quality assurance and SLA trends by region to identify inconsistency early. How would you communicate a technical security-operations priority to Product or executive stakeholders? I would frame the issue in terms of customer risk, analyst capacity, service-level impact, and the expected outcome of the requested investment. I would use concise evidence such as incident patterns, time-to-response trends, false-positive volume, and projected efficiency gains. The recommendation would include options, trade-offs, ownership, and a measurable success criterion rather than only technical detail. Opportunity details ## About this role. What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact. Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers’ protection. Huntress now secures more than 5M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other. Reports to: Director, Security Operations Center Location: Remote UK Compensation Range: £94,500 to £115,000 base plus bonus and equity What You’ll Do: The Huntress Security Operations Center is a global team of security analysts dedicated to investigating and responding to incidents on our partners’ networks 24/7, 365 days a year. Daily activities consist of providing investigation, containment, and response actions across millions of endpoints. This role is accountable for defining and streamlining processes, workflows, and playbooks that enable effective day-to-day operations. As Huntress continues to grow, we are laser-focused on scaling our operations and force-multiplying our human analysts by 10X. This position is responsible for enabling analysts to meet our mission and achieve internal Service Level Objectives for response times. The Security Operations Manager will work with their peer regional managers to ensure consistent global operations while providing our analyst team with training opportunities and career growth. Responsibilities: * Design, implement, and enforce internal processes to reduce burnout and increase the productivity of the operations center against a global set of expectations and standards * Manage and enforce local/global shift coverage to ensure 24/7 operations are maintained 365 days a year * Meet with analysts in a 1:1 setting weekly to socialize focus initiatives, gather feedback, provide feedback, and enable analysts to progress rapidly in their career * Contribute to the development and implementation of analyst training programs designed to streamline onboarding and advance analyst skill sets in Digital Forensics, Incident Response, Malware Analysis, Detection Engineering, Threat Hunting, and Automation * Work with the Product organizations to prioritize the creation of new capabilities designed to augment and force multiple analyst capabilities * Maintain accountability for routine quality assurance for your designated region * Engage with our Support organization to create streamlined workflows for partner/customer requests that need Security Operations Center analysis * Strengthen and mature our existing processes and relationships with our Tactical Response, Threat Hunting, and Detection Engineering teams within the Security organization * Provide one level of technical leadership for analysts of the Security Operations Center analysts * Ensure team members fully understand the goals and objectives of Huntress’ mission and how their work fits into the bigger picture * Provide key input and guidance to company stakeholders such as Marketing, Sales, Support, and Product * Develop, track, and report on Objectives and Key Results linked to Security Operations Center focus initiatives * Help operationalize new technologies and services that Huntress brings to market * Participate in public speaking engagements in both webinar and in-person formats What You Bring To The Team: * Experience in leading diverse cybersecurity teams with various skills. These teams work in Security Operations, Digital Forensics, Incident Response, Malware Analysis, Threat Hunting, and Detection Engineering * 5+ years of Security Analyst experience working in a global 24×7 security operations center with a focus on Windows forensics * 2+ year of team lead or managerial experience in a global operations center or Incident Response role. Preferably within a MSSP, MDR provider, or Incident Response service. * Actively engaged in the information security community by attending conferences or contributing to conversations/projects in the public domain * Continually learning and staying up to date on the latest threat actor tradecraft, detection techniques, and security operations concepts * Ability to identify workflows being performed and create detailed process diagrams and operating procedures * Effective communicator of highly technical concepts to stakeholders of varying technical backgrounds * Demonstrated experience leading initiatives or projects that required delegation and accountability to achieve success * Data-driven approach with experience in Data Science concepts What We Offer: * 100% remote work environment – since our founding in 2015 * New starter home office set up reimbursement (£398) * Generous personal leave entitlements * Digital monthly reimbursement (£92) * Travel to the US 1-2 times/year for various company events * Pension * Access to the BetterUp platform for coaching, personal, and professional growth Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status. We do discriminate against hackers who try to exploit businesses of all sizes. Accommodations: If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to [accommodations@huntresslabs.com](mailto:accommodations@huntresslabs.com). Please note that non-accommodation requests to this inbox will not receive a response. Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our [Candidate Privacy Notice](https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&source=click) for more details on our practices and your data privacy rights. #BI-Remote Show more [Apply now >](https://jobicy.com/jobs/155134-manager-security-operations-center-emea.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. Next step ## Apply now. Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg) Huntress Oct 12 New ### [Security Operations Analyst- Ireland](https://jobicy.com/jobs/155141-security-operations-analyst-ireland.md) What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Oct 12 New ### [Senior Blockchain Intelligence Analyst, Ransomware](https://jobicy.com/jobs/155136-senior-blockchain-intelligence-analyst-ransomware.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![Discord logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/02/WRILS-210216185819-522054.jpg) Discord Oct 12 New ### [Senior Software Engineer, Application Security](https://jobicy.com/jobs/155131-senior-software-engineer-application-security.md) Discord has a highly engaged community of millions of daily active users who use the platform for many different reasons, but there’s one thing that nearly everyone does: play video… * ![UpGuard logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/474a12c7-221.png) UpGuard Oct 12 New ### [Staff Product Security Engineer](https://jobicy.com/jobs/155088-staff-product-security-engineer-2.md) Who are we? At UpGuard, we are replacing manual security bottlenecks with AI-driven precision. Fresh off a US$75M Series C, we are scaling our infrastructure to process 100 billion risk… * ![Cision logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/e9661342-221.jpeg) Cision Oct 12 New ### [Senior Security Engineer](https://jobicy.com/jobs/155075-senior-security-engineer.md) At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As… * ![Five9 logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/7c3d754e-221.png) Five9 Oct 12 New ### [Staff Information Security Engineer](https://jobicy.com/jobs/155070-staff-information-security-engineer.md) Join us in bringing joy to customer experience. Five9 is a leading provider of cloud contact center software, bringing the power of cloud innovation to customers worldwide. Living our values… * ![Stripe logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/10/WRILS-201011073943-272457.png) Stripe Oct 12 New ### [Abuse Research Engineer](https://jobicy.com/jobs/153053-abuse-research-engineer.md) Who we are About Stripe Stripe is a financial infrastructure platform for businesses. Millions of companies—from the world’s largest enterprises to the most ambitious startups—use Stripe to accept payments, grow… * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Oct 11 New ### [Senior / Staff Intelligence Analyst, Environmental Crimes](https://jobicy.com/jobs/155032-senior-staff-intelligence-analyst-environmental-crimes.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRM’s platforms enable investigators to trace illicit activity, build… * ![Databricks logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/12/4e3f864ba9cf3c62d471e1c62414d098.jpg) Databricks Oct 11 New ### [Staff Security Engineer, Incident Response](https://jobicy.com/jobs/155021-staff-security-engineer-incident-response.md) RDQ327R180 Staff Security Engineer, Incident Response The Incident Response team’s mission is to respond to security threats, incidents and investigations to protect our customers, employees and enterprise data in a… * ![Resilience logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/e67f0de9-221.png) Resilience Oct 11 New ### [Tabletop Exercise (TTX) Specialist – Cybersecurity Focus](https://jobicy.com/jobs/154999-tabletop-exercise-ttx-specialist-cybersecurity-focus.md) About Us At Resilience, we’re creating a new category that integrates cybersecurity, cyber insurance, and cyber risk management. Founded in 2016 by experts from across the highest tiers of the… [Browse all jobs](https://jobicy.com/jobs.md)