Security Operations Center Manager

You will be contributing to that vision by…

• Being a hands-on leader who can drive continuous improvements, enhance security protocols, and collaborate with cross-functional teams to mitigate cyber threats.
• Lead, mentor, and manage a team of 7 SOC analysts and engineers, ensuring operational efficiency and high performance.
• Oversee security monitoring, threat intelligence, incident response, and forensic investigations to mitigate risks.
• Develop, implement and improve SOC processes, policies, and playbooks to standardize incident response procedures.
• Continuously assess and improve SOC tools, SIEM solutions, and threat detection technologies.
• Ensure adherence to security frameworks, regulatory requirements, and industry best practices.
• Conduct regular security assessments, threat modeling, and vulnerability analysis to identify potential risks.
• Manage SOC shift schedules, ensuring 24/7 coverage and incident escalation protocols.
• Provide detailed incident reports, KPIs, and security metrics to senior leadership.
• Collaborate closely with the global IT Security teams, the European Security Operations team and IT or other departments to ensure compliance with security policies, regulatory requirements and the business objectives.
• Stay updated on the latest cybersecurity threats, attack techniques, and mitigation strategies.

What skills & experience you’ll bring to us

• Bachelor’s or master’s degree in Cybersecurity, Information Technology, or related field (or equivalent work experience).
• 7+ years of experience in security operations, SOC leadership, or cybersecurity management.
• Proven experience managing a SOC team with a focus on incident response and threat management.
• Excellent leadership, communication, and problem-solving skills.
• Proficiency in English is required; knowledge of Chinese or German is a plus.
• Strong knowledge of SIEM solutions, IDS/IPS, firewalls, EDR, and forensic tools.
• Experience with cybersecurity frameworks such as NIST, ISO 27001, and MITRE ATT&CK.
• Hands-on expertise in log analysis, malware analysis, and threat intelligence.
• Hands-on experience with SIEM solutions like Splunk or Sumologic, Endpoint Protection and Response Solutions like Microsoft Defender or Crowdstrike, Vulnerability management solutions
• Certifications such as CISM, CISSP, GIAC, GSOM, or CEH are highly desirable.
• Ability to work in a shift-based environment and handle high-pressure situations effectively.
• Excellent communication skills, with the ability to convey technical concepts to non-technical stakeholders.
• High level of integrity, discretion, and professionalism in handling sensitive security matters
• Able to exercise decisiveness when required.