SOC Manager
Hays Poland
Your new company
A global organization investing heavily in cybersecurity and modern security operations. The company is building a mature, autoeczematization SOC environment and is looking for a strong leader who can elevate operational excellence, strengthen detection and response capabilities, and guide a team of skilled analysts working in a 24/7 model. You will join a forward‑thinking security department that collaborates closely with IT, cloud, and business teams to protect the entire enterprise.
Your new role
As the SOC Manager, you will lead and develop a team of SOC analysts responsible for monitoring, detecting, analyzing, and responding to security incidents across the organization. Your responsibilities will include:
- Managing and mentoring SOC analysts, setting priorities, and overseeing daily operations.
- Supervising the full incident lifecycle: identification, triage, escalation, and resolution.
- Making key decisions and coordinating response actions during active incidents.
- Developing and maintaining SOC procedures, standards, and operational playbooks.
- Implementing new detection rules, IOCs, and threat intelligence insights.
- Driving automation, orchestration, and process optimization within SOC operations.
- Monitoring SOC performance and reporting key operational metrics.
- Collaborating with Cybersecurity, IT, and business stakeholders.
- Leading tabletop exercises for SOC and critical business teams.
- Ensuring SOC activities align with internal security policies and compliance requirements.
What you'll need to succeed
5–7+ years of experience in cybersecurity, including SOC operations and SIEM technologies.
Proven experience in a leadership or mentoring role.
Higher technical education (IT, Cybersecurity, Computer Science).
Strong knowledge of SIEM, EDR, network logs, and analytical tools.
Solid understanding of incident lifecycle, attack techniques, MITRE ATT&CK, and cyber kill chain.
Experience with threat analysis and working with IOCs.
Familiarity with cloud environments and cloud incident response.
Ability to identify automation opportunities and implement operational improvements.
Strong leadership, communication, and analytical skills.
Ability to work under pressure and make informed decisions quickly.
Intermediate knowledge of PowerShell or Python.
Nice to have: CISSP, CCSP, SSCP, CASP, GMON, GCIH, GCIA, GCFA, GCFE, GREM or similar certifications.
What you'll get in return
A strategic leadership role with real impact on the organization’s security posture.
Opportunity to shape SOC processes, automation, and long‑term operational strategy.
Work with modern technologies and a skilled cybersecurity team.
Professional development support, including certifications and training.
Competitive salary and benefits package.
A stable, collaborative, and intraformational work environment.
What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.
Hays Poland sp. z o.o. is an employment agency registered in a registry kept by Marshal of the Mazowieckie Voivodeship under the number 361.