SOC & Cyber Defense Manager

Summary

Data has never been more valuable—or more vulnerable. As organizations accumulate massive volumes of sensitive information, they face mounting pressure from threat actors and privacy regulations alike. Answering a critical question—“What data do I have, where is it, and who can access it?”—has become essential to protecting data and ensuring compliance.

At Varonis, we believe the most effective way to secure data is from the inside out. Our mission is to make data protection autonomous—simplifying how organizations discover, classify, and control their sensitive information across hybrid cloud environments.

Responsibilities

• Lead, mentor, and manage a team of analysts and incident responders, fostering a culture of continuous improvement and collaboration.
• Oversee real-time monitoring, analysis, and escalation of security events using SIEM, SOAR, and other security tools.
• Develop, implement, and optimize SOC processes, playbooks, and standard operating procedures.
• Coordinate incident response activities, ensuring timely investigation, containment, eradication, and recovery from cyber incidents.
• Serve as the primary point of contact for major security incidents, coordinating with internal stakeholders and external partners as needed. Ensuring effective communication and coordination among stakeholders throughout the lifecycle of security incidents.
• Stay informed on the latest cyber threats, vulnerabilities, and regulatory developments to adapt the organization’s security posture proactively.
• Prepare and deliver regular reports, metrics, and presentations to executive management regarding Cyber Defense Center's performance and emerging risks.
• Support compliance efforts and audits related to cybersecurity frameworks (e.g., SOC2, ISO 27001).
• Manage Cyber Defense Center's technology stack, including evaluating and recommending tools and solutions for threat detection and response.
• Establish and lead a dedicated purple team to enhance detection, response, and resilience against threats.
  
  

• 5+ years of experience in cybersecurity.
• 3+ years in a Security Operation Management role.
• Strong knowledge of security operations, incident response, threat intelligence, and digital forensics.
• Experience with SIEM, EDR, SOAR, firewalls, and other SOC technologies.
• Relevant certifications such as CISSP, CISM, GIAC, or equivalent are highly desirable.
• Knowledge of attacker tactics, techniques, and procedures (TTPs), as well as methods for defense.
• Excellent analytical, problem-solving, and organizational skills.
• Exceptional communication skills, with the ability to convey complex security concepts to technical and non-technical audiences.
• Ability to work under pressure, manage multiple priorities, and respond to high-impact incidents effectively.
• Demonstrated experience in developing, tracking, and reporting on key performance indicators (KPIs) to measure SOC effectiveness and drive continuous improvement.