SOC Manager Americas

• Operational Leadership: Lead Security Operations Center activities ensuring monitoring triage investigation escalation and response processes are consistent measurable and aligned with established procedures and service expectations.

• AI & Agentic Security Operations: Help shape build and operationalize StoneXs agentic Security Operations platform partnering with AI engineers and security teams to apply AI and automation across triage investigation enrichment orchestration and analyst decision support. Ensure capabilities deliver measurable operational value while maintaining appropriate human oversight governance and accountability.

• People & Culture: Build a healthy accountable and sustainable team environment where analysts can perform at a high level without burnout becoming an accepted cost of operating a security function.

• Developing People: Coach and develop analysts providing regular feedback clear expectations growth opportunities and support that strengthens technical capability judgment and confidence.

• Incident Coordination: Manage escalations and coordinate response activities during priority cybersecurity events ensuring the right teams and stakeholders are engaged when needed.

• Operational Continuity: Ensure effective documentation communication and handoffs across regions and time zones so important context and accountability arent lost between teams.

• Investigation Quality: Drive consistency and quality across investigations documentation and reporting through coaching review and clearly defined expectations.

• Partnership: Work closely with Threat Intelligence and Engineering teams to validate alerts test detection use cases improve processes and strengthen overall detection and response capabilities.

• Continuous Improvement: Use operational metrics team feedback AI and automation to improve alert quality reduce unnecessary noise and repetitive work strengthen processes and continuously improve both security outcomes and the analyst experience.

As the Security Operations Center Manager a typical week might include the following:

• Spending at least four days in the office engaging directly with analysts security partners and other stakeholders.

• Meeting with analysts to review investigations operational priorities challenges workload and development opportunities.

• Reviewing escalations and priority incidents while helping the team make sound decisions and coordinate response activities.

• Coaching analysts through complex investigations and helping strengthen their technical judgment documentation and decision-making.

• Reviewing operational handoffs and documentation to ensure continuity across regions and time zones.

• Partnering with Threat Intelligence and Engineering teams to validate detections investigate recurring issues and identify opportunities to improve alert quality.

• Partnering with AI engineers Detection Engineering and other security teams to identify test and operationalize agentic workflows that reduce manual effort accelerate investigations and improve analyst decision-making.

• Reviewing alert volumes workloads operational trends and team feedback to identify sources of unnecessary friction or fatigue and opportunities where AI automation or process improvements can make the team more effective.

• Contributing to Security Operations Center reporting metrics and continuous improvement initiatives.

• Participating in an on-call rotation and providing after-hours leadership support during major cybersecurity incidents or significant operational events.

• Occasionally traveling for team meetings leadership gatherings or other business needs.

This job might be for you if:

• Youre people-centered you understand that protecting the business starts with taking care of the people doing the work and you pay attention to workload operational pressure alert fatigue development and team wellbeing.

• Youre culture-driven you want to build a team where people feel supported accountable comfortable raising concerns and excited to continue developing their careers.

• Youre calm under pressure when an investigation or incident becomes challenging people look to you for clarity direction and steady leadership.

• Youre a coach you enjoy helping analysts strengthen their technical skills judgment confidence and ability to operate independently.

• Youre operationally minded you value consistency strong processes clear handoffs measurable outcomes and disciplined execution.

• Youre collaborative you know effective cyber defence depends on strong partnerships between Security Operations Threat Intelligence Engineering and other technology teams and youre comfortable working with diverse teams and perspectives across the globe.

• Youre excited about whats next you want to be at the forefront of how AI and agentic technologies are changing security operations and youre energized by turning emerging technology into practical capabilities that make analysts and defenders more effective.

• Youre comfortable making decisions you can assess the information available make sound decisions quickly and adjust as circumstances change.

• Youre improvement-focused you challenge unnecessary noise repetitive work and inefficient processes rather than accepting burnout and constant firefighting as simply part of security operations.