← All roles
Remote$205k - $215kFull-timePosted 2mo ago

About the role

Security Operations Center (SOC) Manager responsible for monitoring, detecting, and responding to threats in cloud-native environments; architecting and governing modern SOC functions; leading incident response and post-mortems; mentoring teams and embedding security controls across platform architecture.

Responsibilities

  • Architect the SOC strategy and roadmap, defining threat intelligence operations, detection frameworks, and defensive maturity metrics.
  • Build and tune detection logic across cloud stacks, identity layers, and endpoints, rejecting noise to accelerate incident response velocity.
  • Own incident command, leading containment and recovery operations while driving engineering change through rigorous post-mortems.
  • Govern the defensive stack—SIEM, EDR, and automated playbooks—ensuring engineering delivers lean, high-fidelity operations at scale.
  • Establish proactive threat hunting programs, synthesizing external intelligence to intercept emerging threats before they reach mission-critical systems.
  • Synchronize security controls with engineering and product squads, embedding rigorous automated defenses into platform architecture.
  • Mentor and scale a high-performing security operations squad, anchoring a culture built on accountability and technical craft.
  • Optimize vendor and MDR relationships, ensuring third-party partnerships deliver the technical execution the mission demands.

Qualifications

  • 8+ years in cyber operations, incident response, and threat intelligence with minimum 3 years leading high-agency security operations teams.
  • Deep technical mastery building modern SOC functions: SIEM architecture, EDR stack deployment, high-fidelity incident response frameworks.
  • Fluency in cloud-native environments: AWS, Kubernetes security, containerized workload defense, logging pipeline engineering.
  • Track record engineering detection logic and automated playbooks that scale defensive operations and reduce alert noise.
  • Ability to mentor technical talent and lead complex security initiatives through ambiguity in high-growth startup environments.
  • Clear communication translating technical blast radius and complex risk into unsentimental recommendations for leadership.
  • Expertise navigating FedRAMP, DoD SRG, and CMMC compliance in regulated government and defense environments.
  • Hands-on scripting and automation engineering: Python, Terraform, SOAR playbooks for detection and response tooling development.

Skills

Required:SOC strategy and roadmapDetection logic and playbooksIncident response leadershipSIEM/EDR governanceThreat huntingCloud-native securityMentoring and leadershipCompliance (FedRAMP/DoD CMMC)Scripting/automation

Benefits

  • Competitive salary
  • 100% employer-paid medical, dental, and vision coverage for you and your dependents
  • 401(k) with a 3% company contribution
  • Comprehensive wellness benefits, including a One Medical membership, mental health resources, family planning support, and more
  • Equity incentive plan
  • New hire technology and home office stipend
  • Annual professional development stipend
  • Flexible paid time off, plus all federal holidays
  • Generous parental leave
  • Flexible remote work opportunities
  • Employee referral bonus program
Last updated Aug 26, 2026. Interested? Apply on the company site.
Second Front Systems logo

About Second Front Systems

Powering software for the free world.

Discover a better path to ATO. Leverage Second Front’s accredited software platform to fast-track securing authorization for government use of your SaaS software.

softwaregovernmentsecurityaccreditationSaaScompliancecloud

More open roles at Second Front Systems