SOC Manager

SOC Manager / Security Operations Centre Manager: Detection & Response

Location: Dublin / Hybrid | Type: Permanent

The client

I'm working with an international software business that is rethinking how its security function operates, with smart automation and AI at the centre of the plan. They need a senior hands-on leader to run their defensive operations and take them to the next level.

The role

You'll be accountable for how the business detects, investigates and responds to threats, and for the small team that does that work. You'll also manage the relationship with an external monitoring partner, and you'll have real input into how machine-driven analysis and automated response are introduced safely.

You'll work alongside a separate senior leader who focuses on long-term engineering and architecture. That leaves you free to concentrate on running and improving what's live today, with a clearly defined scope and strong senior sponsorship.

Your remit

Leading monitoring, triage, investigation, containment and recovery across cloud, endpoint, identity and SaaS estates

Taking charge of serious security incidents and pulling together colleagues from engineering, legal, privacy, product and communications

Holding the outsourced monitoring provider to account: agreeing targets, challenging the quality of what they escalate, and pushing for sharper tuning

Improving detection coverage and quality in partnership with the engineering team

Directing the response when critical vulnerabilities or actively exploited threats emerge

Shaping and delivering a plan for using AI and automation in the SOC, including sensible controls and a measured path towards automated containment for approved scenarios

Setting the metrics that matter and reporting them clearly to senior stakeholders

Hiring, coaching and developing the teamWhat good looks like in the first couple of years

Round-the-clock coverage you can rely on (this is not a shift based role)

Fewer noisy alerts and better-quality detections

Quicker, more decisive containment

A monitoring partner that delivers against clear expectations

Automation and AI becoming part of how the team works every day

A capable, engaged teamAbout you

A track record leading a security operations or incident response team, ideally in a cloud-first or software-as-a-service setting

First-hand experience leading the response to significant incidents

Experience managing an outsourced SOC, MDR or similar provider and driving measurable improvement

Solid grounding in cloud security and modern detection platforms, including the Microsoft ecosystem

Curiosity and pragmatism about automation, orchestration and AI, balanced with a good grasp of risk

Confident communication with both engineers and executives

Industry certifications (e.g. GCIH, GCFA, CISSP, CISM) are welcome but not a requirementWhy consider it

A genuine chance to modernise a function rather than simply maintain it

A leadership team that backs investment in security and in new technology

A focused remit with a clear boundary between operations and architecture

Broad exposure and influence in an international organisationNext steps

For a confidential conversation, please send through your updated CV