Soc Manager

KMD Poland Warsaw 2026-11-13

What you bring:

5+ years of experience in cyber security operations, including at least 2 years in a SOC leadership: manager, team lead or comparable operational management role.
Hands-on understanding of security monitoring, incident response, threat detection and investigation in enterprise environments.
Experience leading teams that work across shifts or provide business-critical operational services.
Strong knowledge of SIEM and EDR operating models; experience with Microsoft Defender, Microsoft Sentinel and/or CrowdStrike stack is highly relevant.
Ability to translate technical findings into clear business impact, priorities and decisions for non-technical stakeholders.
Experience with operational governance, KPIs, service improvement, incident reviews and stakeholder escalation.
Confident people leadership, including coaching, performance development, recruitment and support during high-pressure incidents.
Excellent communication and documentation skills, with fluency in written and spoken English.
A degree in cybersecurity, information technology or a related field, or equivalent relevant professional experience.
Availability for an employment contract and willingness to support major incidents outside normal business hours when management escalation is required.

Cooperation Type: Employment

KMD Security Operations Center (SOC) is the operational backbone of our cyber defense. As we expand monitoring and response to 24/7/365 coverage, we are looking for a SOC Manager to establish clear operational ownership, lead frontline response and ensure effective escalation of complex or high-impact incidents. 

You will report to the Head of Security Operations and lead two complementary capabilities: Detection & Response, operating around the clock, and Advanced Threat Operations, providing specialist investigation, threat hunting, forensics and detection expertise. 

,[Lead the day-to-day operation and continued development of the SOC, with accountability for service quality, resilience and readiness. , Build and mature a 24/7/365 operating model for Detection & Response, including staffing, shift governance, handovers and escalation paths. , Provide leadership to Detection & Response and Advanced Threat Operations, ensuring clear priorities, effective collaboration and professional development. , Own operational performance through meaningful metrics, and use them to drive measurable improvement. , Oversee triage, containment and coordination of security incidents, ensuring timely activation of relevant technical and business stakeholders. , Ensure complex or high-impact investigations are escalated appropriately and supported by threat hunting, forensic analysis and malware triage. , Maintain and improve SOC processes, playbooks, detection coverage, case management and post-incident review practices. , Work closely with SOC Engineering, Vulnerability Management, Penetration Testing, IT operations and service owners to strengthen preventive and detective controls. , Communicate operational risk, incident status and improvement priorities clearly to Security Operations leadership and other stakeholders. , Support supplier and technology governance across the SOC toolset ] Requirements: Security, Backbone, Testing, SIEM, EDR, Degree, Cybersecurity Additionally: Modern office, Free coffee, Canteen, Mobile phone, Free snacks, Free beverages.