SOC Manager

KMD Security Operations Center (SOC) is the operational backbone of our cyber defense. As we expand monitoring and response to 24/7/365 coverage, we are looking for a SOC Manager to establish clear operational ownership, lead frontline response and ensure effective escalation of complex or high-impact incidents.  

You will report to the Head of Security Operations and lead two complementary capabilities: Detection & Response, operating around the clock, and Advanced Threat Operations, providing specialist investigation, threat hunting, forensics and detection expertise.  

Your future role:​ 

• Lead the day-to-day operation and continued development of the SOC, with accountability for service quality, resilience and readiness.  

• Build and mature a 24/7/365 operating model for Detection & Response, including staffing, shift governance, handovers and escalation paths.  

• Provide leadership to Detection & Response and Advanced Threat Operations, ensuring clear priorities, effective collaboration and professional development.  

• Own operational performance through meaningful metrics, and use them to drive measurable improvement.  

• Oversee triage, containment and coordination of security incidents, ensuring timely activation of relevant technical and business stakeholders.  

• Ensure complex or high-impact investigations are escalated appropriately and supported by threat hunting, forensic analysis and malware triage.  

• Maintain and improve SOC processes, playbooks, detection coverage, case management and post-incident review practices.  

• Work closely with SOC Engineering, Vulnerability Management, Penetration Testing, IT operations and service owners to strengthen preventive and detective controls.  

• Communicate operational risk, incident status and improvement priorities clearly to Security Operations leadership and other stakeholders.  

• Support supplier and technology governance across the SOC toolset 

What you bring: 

• 5+ years of experience in cyber security operations, including at least 2 years in a SOC leadership: manager, team lead or comparable operational management role.  

• Hands-on understanding of security monitoring, incident response, threat detection and investigation in enterprise environments.  

• Experience leading teams that work across shifts or provide business-critical operational services.  

• Strong knowledge of SIEM and EDR operating models; experience with Microsoft Defender, Microsoft Sentinel and/or CrowdStrike stack is highly relevant.  

• Ability to translate technical findings into clear business impact, priorities and decisions for non-technical stakeholders.  

• Experience with operational governance, KPIs, service improvement, incident reviews and stakeholder escalation.  

• Confident people leadership, including coaching, performance development, recruitment and support during high-pressure incidents.  

• Excellent communication and documentation skills, with fluency in written and spoken English.  

• A degree in cybersecurity, information technology or a related field, or equivalent relevant professional experience.  

• Availability for an employment contract and willingness to support major incidents outside normal business hours when management escalation is required.