Compétences, Créativité,
Engagement

Stimulating. Motivating. Challenging.

Leveraging its long-standing expertise in securing digital content as well as fighting piracy, Kudelski Security, a division of the Kudelski Group, is a provider of cybersecurity solutions and services focused on protecting data, processes and systems for companies and organizations around the world, safeguarding their assets at a time of increasingly remote communications.

Lieu : Phoenix, United States

Mission

Job Title: Security Operations Manager

Location: Onsite/Hybrid: Phoenix, AZ

Who We Are

Kudelski Security is a global Gartner- and Forrester-recognized provider of unique cybersecurity solutions across both IT and OT (Operational Technology) environments. Our team of security experts delivers end-to-end consulting, technology, managed services, and threat intelligence.

Our MDR/XDR services feature four global state of the art SOCs delivering tailored, intelligence-driven 24/7/365 protection. With 2M+ users secured, we provide unmatched expertise to empower organizations to proactively defend against the most sophisticated cyber threats and build strategic cybersecurity programs.

Responsabilités

Position Summary

The Security Operations Manager leads Kudelski Security’s U.S. Cyber Fusion Center, owning all day‑to‑day SOC operations while partnering closely with global teams to maintain seamless 24/7/365 coverage. This role is central to delivering high‑quality MDR (managed detection and response) services, serving as the primary escalation point for operational issues and driving innovation across detection, response, and automation.

The Manager oversees Tier 1 and Tier 2 analysts, ensuring SLA adherence, strong MTTR (mean time to respond) performance, and continuous operational improvement. They are responsible for developing talent, mentoring staff, and fostering a high‑performance culture.

The role also includes operationalizing threat intelligence, identifying emerging vulnerabilities, and integrating AI‑driven detection and automation into daily workflows. In addition, the Manager collaborates with CAU and Product Teams to ensure alignment of new capabilities and smooth service delivery.

Responsibilities

• Lead, mentor, and develop Tier 1–2 analysts and security engineers, building a culture of trust, accountability, and continuous learning.
• Manage hiring, onboarding, scheduling, performance coaching, and when necessary, performance‑related exits.
• Ensure consistent delivery of MDR services by meeting SLA, KPI, and MTTR targets while monitoring operational metrics for improvement opportunities.
• Oversee shift planning, workload distribution, escalation workflows, and cross‑team collaboration to maintain smooth 24/7 operations.
• Serve as the senior escalation point for high‑severity incidents and provide clear, timely communication to clients and internal stakeholders.
• Represent the SOC during client onboarding, helping establish confidence, support deal closure, and ensure a seamless transition into steady state operations.
• Partner with Customer Success, Engineering, Product, and Threat Intelligence teams to streamline onboarding, operationalize new detections, and prevent downstream issues.
• Champion an automation‑first mindset using SOAR and AI‑assisted workflows to improve efficiency and reduce analyst fatigue.
• Maintain and enhance SOC documentation including SOPs, runbooks, and playbooks while driving process improvements across detection, triage, and response.
• Support integration of cloud‑native and OT/ICS monitoring technologies and advocate for tooling and workflow enhancements that elevate service quality.

Exigences / profil

Your Key Skills and Qualities

• 5+ years in SOC or MSSP leadership, ideally in a 24/7/365 environment.
• Strong people‑leadership skills with experience coaching, developing, and scaling teams.
• Customer‑oriented mindset with experience handling escalations and executive‑level communication.
• Solid understanding of SIEM, SOAR, EDR/XDR, and cloud security technologies.
• Familiarity with AI/ML use cases in detection, triage, and response.
• Exposure to OT/ICS security and industrial protocols (e.g., Modbus, DNP3, OPC).
• Experience with incident management, service delivery, and operational metrics.
• Excellent communication, stakeholder management, and conflict‑resolution abilities.
• Analytical, proactive, and comfortable driving decisions in fast‑moving environments.

Preferred Qualifications

• Certifications such as CISSP, GCIH, GCIA, GCFA, or equivalent.
• Experience with MITRE ATT&CK, threat hunting, or purple teaming.
• Knowledge of regulatory frameworks (NIST, ISO 27001, NERC CIP).

Référence : 15610
Date de publication : 22-10-2025