About the Role
We are looking for a SOC Delivery Manager to own the end-to-end delivery of Security Operations Center services for our clients. This is a leadership role that blends operational rigor, people management, and client relationship ownership. You will be accountable for SLA and KPI adherence, the quality of threat detection and incident response, and the continuous maturity of the SOC. You will act as the primary escalation point and the face of the SOC to stakeholders, while leading a multi-tier team of analysts and engineers. Key Responsibilities: Service delivery and operations- • Own day-to-day delivery of 24x7 SOC services, ensuring detection, triage, investigation, and response activities meet agreed SLAs and quality standards. • Oversee the incident lifecycle end to end, from alert to containment to closure, and drive major-incident coordination and post-incident reviews. • Track and report on operational metrics (MTTD, MTTR, alert volumes, false-positive rates, SLA compliance) and drive corrective actions where targets are missed. Client and stakeholder management- • Serve as the primary point of contact for clients on all delivery matters, running regular service reviews and building trusted, long-term relationships. • Translate client security requirements into operational workflows, use cases, and runbooks, and manage expectations on scope, priorities, and outcomes. • Handle escalations professionally and ensure timely, transparent communication during high-severity incidents. Team leadership- • Lead, mentor, and develop a team of SOC analysts (L1/L2/L3) and engineers, managing shift rosters, capacity, and coverage. • Set performance objectives, conduct reviews, and support career growth, training, and certification plans. • Foster a culture of ownership, continuous learning, and operational discipline. Process, tooling, and continuous improvement- • Drive SOC maturity through improvements to detection engineering, playbooks, automation (SOAR), and threat intelligence integration. • Partner with engineering teams to tune SIEM/EDR content, reduce noise, and improve detection coverage aligned to frameworks such as MITRE ATT&CK. Required Qualifications and Skills- • Minimum 8 years of experience in cybersecurity, with strong grounding in security operations, incident response, and threat monitoring. • 3+ years of experience leading SOC teams or managing security service delivery, ideally in an MSSP or managed-services environment. • Hands-on understanding of SIEM platforms (e.g., Splunk, Microsoft Sentinel, QRadar, Elastic), EDR/XDR, and SOAR tooling. • Solid knowledge of incident response methodologies, the cyber kill chain, and MITRE ATT&CK. • Proven track record of managing SLAs, KPIs, and client relationships in a delivery-focused role. • Strong understanding of security frameworks and standards (NIST, ISO 27001, SOC 2). • Excellent communication, stakeholder management, and escalation-handling skills. • Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience). Preferred Qualifications- • Experience with cloud security operations across AWS, Azure, or GCP. • Exposure to detection engineering, threat hunting, and automation-led SOC operations. • Experience managing multi-client or multi-geography delivery.