SOC Manager

About the Role

What if your hard-won experience in security operations could directly strengthen how organizations detect, respond to, and contain real threats? We're looking for a seasoned SOC Manager to evaluate and improve the operational backbone of security teams — assessing detection workflows, triage quality, escalation logic, and incident response playbooks with a critical, expert eye.

This is a fully remote, flexible contract role built for experienced cybersecurity professionals who know what good SOC operations look like — and exactly what to do when they don't.

• Type: Hourly Contract
• Location: Remote
• Schedule: Flexible — work on your own terms

What You'll Do

• Review detection alerts, triage workflows, and escalation pathways for effectiveness and consistency
• Evaluate the completeness, accuracy, and quality of incident response actions across the operational lifecycle
• Identify critical gaps in logging coverage, detection logic, and containment procedures
• Summarize incident patterns, operational bottlenecks, and systemic weaknesses in clear, structured reports
• Validate playbooks for real-world feasibility, clarity, and correctness
• Support recurring assessments of SOC maturity, responsiveness, and overall operational rigor

Who You Are

Must-Have:

• Hands-on experience in SOC operations, incident response leadership, or cybersecurity operations
• Deep understanding of detection engineering, response workflows, and the full incident lifecycle
• Strong analytical writing skills — you can translate complex findings into structured, actionable documentation
• A sharp instinct for spotting what's broken, missing, or underperforming in a security operation

Nice to Have:

• Familiarity with SIEM platforms, EDR tools, and cloud-native detection systems
• Experience conducting SOC maturity assessments or red/purple team engagements
• Background in building or auditing response playbooks at scale

Why Join Us

• Fully remote and flexible — work when and where it suits you
• Apply your expertise to meaningful, high-stakes security work
• Freelance autonomy with the structure of clearly defined, impactful tasks
• Ongoing contract potential as assessments expand across new engagements
• Work that directly strengthens the security posture of real organizations