About the Role
What if your hard-won experience in security operations could directly strengthen how organizations detect, respond to, and contain threats? We're looking for a seasoned SOC Manager to evaluate real-world security operations — scrutinizing detection workflows, response playbooks, and incident handling quality to identify what's working, what's broken, and what needs to be built.
This is a fully remote, flexible contract role designed for experienced cybersecurity professionals who think critically, write clearly, and know exactly what good SOC operations look like.
- Type: Hourly Contract
- Location: Remote
- Schedule: Flexible — work on your own terms
What You'll Do
- Review detection alerts, triage workflows, and escalation pathways for quality and consistency
- Evaluate the completeness and accuracy of incident response actions across the full incident lifecycle
- Identify gaps in logging coverage, detection logic, and containment procedures
- Summarize incident patterns, operational bottlenecks, and systemic weaknesses in structured reports
- Validate playbooks for clarity, correctness, and real-world feasibility
- Support recurring assessments of SOC maturity, responsiveness, and overall operational rigor
What You Bring
Must-Have:
- Hands-on experience in SOC operations, incident response leadership, or cybersecurity operations
- Strong understanding of detection engineering, response workflows, and incident lifecycle management
- Clear analytical writing skills — you can translate complex findings into structured, actionable documentation
- Sharp eye for process gaps and the judgment to prioritize what matters most
Nice to Have:
- Familiarity with SIEM platforms, EDR tools, and cloud-native detection systems
- Experience conducting SOC audits, tabletop exercises, or maturity assessments
- Background in threat hunting, purple teaming, or security program development
Who You Are
- A critical thinker who evaluates systems and processes with rigor and objectivity
- Experienced enough to know what good looks like — and precise enough to document what doesn't
- Comfortable working independently and delivering high-quality assessments without hand-holding
- Methodical, structured, and consistent in your approach to complex operational reviews
Why Join Us
- Apply your expertise to meaningful, high-impact security work
- Fully remote and flexible — work when and where it suits you
- Freelance autonomy with clearly defined, task-based assignments
- Contribute to strengthening security postures that protect real organizations from real threats
- Potential for ongoing work and contract extension as new assessments are scoped