[All remote jobs](https://jobicy.com/jobs.md)[![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg)](https://jobicy.com/company/huntress.md)[Huntress](https://jobicy.com/company/huntress.md)

# Manager, Security Operations Center

Review the role, location requirements, compensation details, and application process before deciding whether this opportunity fits your next career move.

[Apply for this job](#job-application)[View company](https://jobicy.com/company/huntress.md)ShareRemote from[USA](https://jobicy.com/job-region/usa.md)SalaryUSD 165k–185k / yrDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceDirectorPublished24 Oct 2026Apply before23 Nov 2026Listing views48Application actions3Application toolkit

## Make your next move.

Prepare your resume, explore your fit, and draft a cover letter for this opportunity.

AI Summary

## The role, at a glance.

Huntress is seeking a Security Operations Center Manager to lead analyst operations for a global, 24/7 cybersecurity service. The role owns SOC workflows, shift coverage, quality assurance, analyst development, service-level objectives, and operational scaling. It requires deep hands-on security operations expertise across Windows forensics, incident response, malware analysis, threat hunting, detection engineering, and automation. The manager will partner with Product, Support, Sales, Marketing, and other security teams while providing technical leadership and career coaching to analysts. This is a US-remote, full-time leadership role with a disclosed base-salary range plus bonus and equity.

## Role DNA

A quick view of the complexity, pace, ownership and collaboration implied by the job description.

### Job Complexity

5/5EasyHard

### Pace & Pressure

5/5RelaxedFast-paced

### Autonomy Level

5/5GuidedFull ownership

### Communication Load

5/5IndependentCollaborative

AI insightThis is a senior operational leadership role in a 24/7 SOC, requiring both technical credibility and accountability for team performance, response objectives, and scalable processes. The manager must balance incident-driven priorities, people leadership, cross-functional influence, and continuous improvement.

## Salary analysis

Estimated compensation compared with the broader US market for similar roles.

Estimated job median (per year)Market rate$175,000US market range (per year)$160k–$210k0$231.00k

AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. The employer discloses a base salary of $165,000–$185,000 USD; based on the professional US leadership role and stated compensation format, the period is inferred to be annual. The midpoint is $175,000 per year, excluding bonus and equity. An estimated US market range for comparable SOC management roles is $160,000–$210,000 per year.

## Core skills

Skills and capabilities most closely associated with this opportunity.

[Security Operations Center management](https://jobicy.com/jobs?search_keywords=Security%20Operations%20Center%20management.md)[Incident response](https://jobicy.com/jobs?search_keywords=Incident%20response.md)[Digital forensics](https://jobicy.com/jobs?search_keywords=Digital%20forensics.md)[Windows forensics](https://jobicy.com/jobs?search_keywords=Windows%20forensics.md)[Malware analysis](https://jobicy.com/jobs?search_keywords=Malware%20analysis.md)[Threat hunting](https://jobicy.com/jobs?search_keywords=Threat%20hunting.md)[Detection engineering](https://jobicy.com/jobs?search_keywords=Detection%20engineering.md)[Security automation](https://jobicy.com/jobs?search_keywords=Security%20automation.md)[SOC process design](https://jobicy.com/jobs?search_keywords=SOC%20process%20design.md)[Shift coverage management](https://jobicy.com/jobs?search_keywords=Shift%20coverage%20management.md)[Quality assurance](https://jobicy.com/jobs?search_keywords=Quality%20assurance.md)[Analyst coaching](https://jobicy.com/jobs?search_keywords=Analyst%20coaching.md)[Service level objectives](https://jobicy.com/jobs?search_keywords=Service%20level%20objectives.md)[Cross-functional collaboration](https://jobicy.com/jobs?search_keywords=Cross-functional%20collaboration.md)[Data-driven decision-making](https://jobicy.com/jobs?search_keywords=Data-driven%20decision-making.md)

Sample interview questionsHow have you improved performance and reduced burnout in a 24/7 security operations center?I start by reviewing workload, alert quality, shift handoffs, response-time data, and analyst feedback. I then prioritize changes such as clearer escalation paths, automation for repetitive tasks, balanced coverage, documented playbooks, and regular capacity reviews. I measure the impact through SLA attainment, quality metrics, retention indicators, and analyst sentiment.

Describe your approach to leading analysts with different specialties, such as incident response, forensics, threat hunting, and detection engineering.

I establish shared operational standards while recognizing the depth of each specialty. Regular one-on-ones, career plans, peer learning, and clearly defined ownership help each analyst grow, while cross-functional exercises improve collaboration during complex investigations. I ensure technical decisions are supported by measurable outcomes and transparent communication.

How would you create and maintain effective SOC playbooks?

I would map current workflows, identify decision points and failure modes, and work with experienced analysts to document practical procedures. Each playbook should define triage criteria, evidence requirements, containment options, escalation triggers, communications, and closure standards. I would review playbooks after major incidents and on a routine cadence using QA findings and new threat intelligence.

How do you balance operational reliability with introducing new security technologies or services?

I use a controlled rollout approach with defined success metrics, training, pilot groups, documentation, and feedback loops. New capabilities should reduce analyst effort or improve customer outcomes without weakening coverage or creating unclear ownership. I communicate expected operational changes early and monitor quality, response times, and adoption throughout the rollout.

How would you communicate a complex security operations issue to nontechnical stakeholders?

I would frame the issue in terms of customer impact, operational risk, decision options, timelines, and measurable outcomes rather than technical detail alone. I would provide an executive summary first, followed by concise supporting evidence and a clear recommendation. This approach keeps stakeholders informed while enabling the technical team to act quickly.

Opportunity details

## About this role.

What We Do:

Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate at the highest level, and it deepens our need for good people who want to make a meaningful impact.

Founded in 2015 by former NSA cyber operators, Huntress is a remote-first team working to make enterprise-grade cybersecurity accessible to businesses of all sizes. We work closely with security teams and service providers protecting complex environments, often without the time or headcount to handle it all. That’s why we build our technology in-house and back it with a 24/7 human-led Security Operations Center (SOC). As a result, our platform is never disconnected from the experts who manage it, ensuring our customers’ protection.

Huntress now secures more than 6M endpoints and 16M identities worldwide. Those numbers keep growing because more businesses rely on us to help carry the load and operate with more confidence. Every day, you can see that commitment in how we stand with our customers and how we show up for each other.

Reports to: Director, Security Operations Center

Location: Remote US

Compensation: $165,000-$185,000 base plus bonus and equity

What You’ll Do:

The Huntress Security Operations Center is a global team of security analysts dedicated to investigating and responding to incidents on our partners’ networks 24/7, 365 days a year. Daily activities consist of providing investigation, containment, and response actions across millions of endpoints.

This role is accountable for defining and streamlining processes, workflows, and playbooks that enable effective day-to-day operations. As Huntress continues to grow, we are laser-focused on scaling our operations and force-multiplying our human analysts by 10X. This position is responsible for enabling analysts to meet our mission and achieve internal Service Level Objectives for response times. The Security Operations Manager will work with their peer regional managers to ensure consistent global operations while providing our analyst team with training opportunities and career growth.

Responsibilities:

* Design, implement, and enforce internal processes to reduce burnout and increase the productivity of the operations center against a global set of expectations and standards
* Manage and enforce local/global shift coverage to ensure 24/7 operations are maintained 365 days a year
* Meet with analysts in a 1:1 setting weekly to socialize focus initiatives, gather feedback, provide feedback, and enable analysts to progress rapidly in their career
* Contribute to the development and implementation of analyst training programs designed to streamline onboarding and advance analyst skill sets in Digital Forensics, Incident Response, Malware Analysis, Detection Engineering, Threat Hunting, and Automation
* Work with the Product organizations to prioritize the creation of new capabilities designed to augment and force multiple analyst capabilities
* Maintain accountability for routine quality assurance for your designated region
* Engage with our Support organization to create streamlined workflows for partner/customer requests that need Security Operations Center analysis
* Strengthen and mature our existing processes and relationships with our Tactical Response, Threat Hunting, and Detection Engineering teams within the Security organization
* Provide one level of technical leadership for analysts of the Security Operations Center analysts
* Ensure team members fully understand the goals and objectives of Huntress’ mission and how their work fits into the bigger picture
* Provide key input and guidance to company stakeholders such as Marketing, Sales, Support, and Product
* Develop, track, and report on Objectives and Key Results linked to Security Operations Center focus initiatives
* Help operationalize new technologies and services that Huntress brings to market
* Participate in public speaking engagements in both webinar and in-person formats

What You Bring To The Team:

* Experience in leading diverse cybersecurity teams with various skills. These teams work in Security Operations, Digital Forensics, Incident Response, Malware Analysis, Threat Hunting, and Detection Engineering
* 5+ years of Security Analyst experience working in a global 24×7 security operations center with a focus on Windows forensics
* 3+ year of team lead or managerial experience in a global operations center or Incident Response role. Preferably within a MSSP, MDR provider, or Incident Response service.
* Actively engaged in the information security community by attending conferences or contributing to conversations/projects in the public domain
* Continually learning and staying up to date on the latest threat actor tradecraft, detection techniques, and security operations concepts
* Ability to identify workflows being performed and create detailed process diagrams and operating procedures
* Effective communicator of highly technical concepts to stakeholders of varying technical backgrounds
* Demonstrated experience leading initiatives or projects that required delegation and accountability to achieve success
* Data-driven approach with experience in Data Science concepts

What We Offer:

* 100% remote work environment – since our founding in 2015
* Generous paid time off policy, including vacation, sick time, and paid holidays
* 12 weeks of paid parental leave
* Highly competitive and comprehensive medical, dental, and vision benefits plans
* 401(k) with a 5% contribution regardless of employee contribution
* Life and Disability insurance plans
* Stock options for all full-time employees
* One-time $500 reimbursement for building/upgrading home office
* Annual allowance for education and professional development assistance
* $75 USD/month digital reimbursement
* Access to the BetterUp platform for coaching, personal, and professional growth

Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.

We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.

We do discriminate against hackers who try to exploit businesses of all sizes.

Accommodations:

If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to [accommodations@huntresslabs.com](mailto:accommodations@huntresslabs.com). Please note that non-accommodation requests to this inbox will not receive a response.

Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our [Candidate Privacy Notice](https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&source=click) for more details on our practices and your data privacy rights.

#BI-Remote

Huntress is committed to creating a culture of inclusivity where every single member of our team is valued, has a voice, and is empowered to come to work every day just as they are.

We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.

We do discriminate against hackers who try to exploit businesses of all sizes.

Accommodations:

If you require reasonable accommodation to complete this application, interview, or pre-employment testing or participate in the employee selection process, please direct your inquiries to [accommodations@huntresslabs.com](mailto:accommodations@huntresslabs.com). Please note that non-accommodation requests to this inbox will not receive a response.

Huntress uses artificial intelligence tools to assist in reviewing and evaluating job applications, including resume screening, skills assessment, and candidate matching and comparisons. These AI tools support our human recruiters in the initial review process, but do not make final hiring decisions without human involvement. By submitting your application, you acknowledge this use of AI in our recruitment process. Please review our [Candidate Privacy Notice](https://trust.huntress.com/?itemUid=47f0a941-b86f-4864-a0d0-a224a34cfd57&source=click) for more details on our practices and your data privacy rights.

#BI-Remote

Show more

[Apply now >](https://jobicy.com/jobs/156765-manager-security-operations-center.md)

*

![Upload CV](data:image/svg+xml;base64,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)

### Upload your resume now

To unlock remote work opportunities and be discovered by global employers.

This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content.

Next step

## Apply now.

Follow the employer’s application method and review Jobicy’s safety guidance before sharing personal information.

Keep exploring

## Related remote jobs.

*
![Twilio logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/10/WRILS-201023175858-722503.jpg)
Twilio Oct 24  New

### [Security Engineer, Incident Response](https://jobicy.com/jobs/156851-security-engineer-incident-response.md)

Who we are At Twilio, we’re shaping the future of communications, all from the comfort of our homes. We deliver innovative solutions to hundreds of thousands of businesses and empower…

*
![Zscaler logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/b3234031-221.png)
Zscaler Oct 24  New

### [Senior Partner Engineer](https://jobicy.com/jobs/156842-senior-partner-engineer.md)

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data…

*
![1Password logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200909195848-296323.png)
1Password Oct 24  New

### [Developer Intern, Data Security – Winter 2027](https://jobicy.com/jobs/156809-developer-intern-data-security-winter-2027.md)

1Password is growing. We’ve surpassed $500M in ARR and we’re continuing to accelerate, earning a spot on the Forbes Cloud 100 for four years in a row and teaming up…

*
![Ping Identity logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/09/63e8d5a6-221.png)
Ping Identity Oct 24  New

### [Manager, Cyber Security](https://jobicy.com/jobs/156790-manager-cyber-security.md)

About Ping Identity: At Ping Identity, we believe in making digital experiences both secure and seamless for all users, without compromise. We call this digital freedom. And it’s not just…

*
![Socket logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/1314ce3c-221.png)
Socket Oct 24  New

### [Threat Researcher](https://jobicy.com/jobs/156770-threat-researcher.md)

About Us Socket helps devs and security teams ship faster by cutting out security busywork. Thousands of orgs use Socket to safely find, audit, and manage open source code. Our…

*
![Tines logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/9285d376-221.png)
Tines Oct 24  New

### [Professional Services Engineer II](https://jobicy.com/jobs/156726-professional-services-engineer-ii.md)

Tines is the intelligent workflow company that powers some of the world’s most important workflows. Tines has been supporting IT and security teams from a diverse range of customers, including…

*
![Zscaler logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/b3234031-221.png)
Zscaler Oct 24  New

### [Principal AI Security Specialist, BeNeLux & Nordics](https://jobicy.com/jobs/156714-principal-ai-security-specialist-benelux-nordics.md)

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data…

*
![Zscaler logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/08/b3234031-221.png)
Zscaler Oct 24  New

### [Principal AI Security Specialist, UK&I](https://jobicy.com/jobs/156716-principal-ai-security-specialist-uki.md)

Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange platform protects thousands of customers from cyberattacks and data…

*
![Tenable logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/01879e02-221.jpg)
Tenable Oct 24  New

### [Associate Services Architect](https://jobicy.com/jobs/153962-associate-services-architect.md)

Who is Tenable? Tenable® is the Exposure Management company. Over 40,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. Our global employees support 65 percent…

*
![Canonical logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b4d068a9-221-1.png)
Canonical Oct 24  New

### [Ubuntu Security Engineer](https://jobicy.com/jobs/149565-ubuntu-security-engineer.md)

Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives…

[Browse all jobs](https://jobicy.com/jobs.md)