Information Security Snr Manager

Reston, VA, United States
Seattle, WA, United States
United States

• Job Identification 328486
• Job Category Information Security Engineer
• Role People Manager
• Job Type Regular Employee
• Does this position require a security clearance? No
• Years 3 to 5+ years
• Additional Info Visa / work permit sponsorship is not available for this position
• Applicants are required to read, write, and speak the following languages English

Location:

(Hybrid) Reston, VA, Seattle, WA

US Citizenship required

Behind every mission‑critical Cloud service is a sophisticated SaaS architecture supporting the largest companies in the world, employing the most advanced software engineering. We are proud to support those services and team with customers who depend on them, continually innovating and challenging the status quo. Our team environment is progressive, flexible, professionally challenging, rewarding, and fun.

We are looking for an experienced SOC Manager to lead and evolve our security operations efforts in reshaping the cloud services landscape across industry verticals to revolutionize the delivery of Cloud Services to the world’s most critical organizations. The SaaS Cloud Security (SCS) organization is responsible for securing enterprise‑grade software services on behalf of our customers at scale.

In this role, you will lead a team of security analysts responsible for 24x7x365 monitoring, detection, and response to protect the Oracle SaaS environment. You will drive SOC modernization with a strong emphasis on automation, AI‑enabled workflows, emerging threats, continuous procedure evaluation
, and cross‑organization collaboration
. You will also champion “
shift‑left
” security by partnering with engineering, operations, and security stakeholders to prevent incidents earlier through improved controls, instrumentation, and resilient design. (Modernization focus aligned to the SOC automation/AI direction in the source.)

Career Level:

Manager (People Leader)

RESPONSIBILITIES/TASKS

• Lead and manage SOC operations to collectively support 24x7x365 monitoring and response coverage; ensure consistent shift handoffs and operational continuity.
• Ensure the confidentiality, availability, and integrity of cloud data and systems; reinforce practices that respect and protect customer data.
• Drive SOC modernization initiatives across people, process, and technology (operating model, metrics/KPIs, quality assurance, and continuous improvement).
• Oversee monitoring of security controls to detect and prevent infiltration of company systems and exfiltration of company data by adversaries; ensure effective escalation and coordination for remediation and forensics.
• Mature detection engineering and operations by improving correlation across disparate log sources, baselining, and expanding behavior‑based alerting aligned to current attacker TTPs.
• Establish and continuously evaluate SOC procedures (SOPs/runbooks), incident severity classification, escalation criteria, and communications processes; run recurring exercises and lessons learned.
• Lead automation of SOC workflows using SOAR tools and/or scripts; prioritize high‑value playbooks (enrichment, deduplication, triage assistance, containment with guardrails).
• Champion AI‑enabled SOC capabilities (e.g., alert clustering, assisted triage, summarization) with appropriate governance and analyst‑in‑the‑loop practices; measure impact on quality and speed. (Aligned to “AI and automation tools” emphasis.)
• Maintain awareness of latest industry trends and threat intelligence
  ; direct hunts/initiatives that address emerging threats and translate learnings into durable detections and playbooks.
• Provide management with monitoring reports and trend analysis; drive actionable outcomes from metrics (noise reduction, coverage gaps, staffing/training needs).
• Provide excellent customer service to Operations and partner teams reporting policy violations, potential incidents, and requesting security solution support.
• Drive cross‑organization collaboration with security, customer support, cloud operation and engineering teams to implement “shift‑left” improvements that reduce incident volume upstream…