Title:  SOC Manager

Do you want to join one of the largest professional services organizations in the market?

 Then Deloitte is the right place for you. Here, you will have the opportunity to boost your career and strengthen your skills within our technology universe. We are an international Tech Hub and we are looking for the best Cybersecurity specialists to join our centers of excellence and community. At Deloitte, you will transform the world as we know it and develop unique and innovative solutions across a wide range of complex transformation projects, from Portugal to the world. We are strengthening our Cyber area and are looking for experienced professionals who enjoy and have a natural aptitude for teamwork and working in a multi-project environment. You can discover all the roles you may perform according to your profile and take your career to the next level!

Join us. We are waiting for you. 

Your day by day and responsabilities:

• Lead the day-to-day operation and strategic development of the Security Operations Center. 
• Manage, coach and develop SOC analysts, shift leads, engineers and other Cyber Defense professionals.
• Own SOC service delivery, including operating models, shift coverage, workload distribution, escalation paths and quality assurance.
• Define and monitor operational KPIs and service levels, including MTTD, MTTA, MTTR, alert quality, case backlog and SLA compliance.
• Oversee the detection, triage, investigation, escalation and response to cybersecurity incidents.
• Act as an escalation point and incident coordinator during high-severity incidents, ensuring clear decision-making and stakeholder communication.
• Participate in management on-call arrangements and support major incidents outside standard business hours when required.
• Ensure effective collaboration across SOC, DFIR, Threat Intelligence, Threat Hunting, Detection Engineering, Vulnerability Management and IT teams.
• Drive continuous improvement of SOC processes, playbooks, use cases, automations and detection coverage.
• Oversee SIEM, SOAR, EDR/XDR and threat intelligence service performance together with engineering teams.
• Lead regular service reviews, operational governance meetings and executive reporting for internal and external stakeholders.
• Manage customer expectations, priorities, risks, escalations and improvement roadmaps in MSSP/MDR or multi-customer environments.
• Support recruitment, onboarding, performance management, career development and workforce planning.
• Maintain readiness through tabletop exercises, incident simulations, lessons learned and audit or compliance activities.
• Contribute to SOC strategy, budgeting, capacity planning, technology selection and transformation initiatives.

Are you the one we are looking for?

• At least 3 years of proven experience managing a SOC or leading a substantial Security Operations team. 
• Proven experience leading 24x7 or business-critical security operations, including shift-based teams and on-call arrangements.
• Demonstrated experience managing high-severity incidents, executive escalations and time-critical operational decisions.
• Strong understanding of SOC operating models, incident management, detection lifecycle, threat intelligence and security engineering.
• Experience managing service performance through KPIs, SLAs, quality controls, operational reporting and improvement plans.
• Proven people-management experience, including coaching, performance management, recruitment and team development.
• Strong customer and stakeholder-management skills, with the ability to communicate risk and operational performance to senior leadership.
• Ability to balance operational delivery, strategic priorities, team wellbeing and customer expectations in high-pressure environments.

Technical & Management Knowledge

• Strong knowledge and leadership experience across the following areas:

• • SOC Operations: 24x7 SOC delivery; Incident management; Shift & capacity planning; KPIs / SLAs / quality; Service governance.
  • Security Technology: Microsoft Sentinel; Defender XDR; Splunk Enterprise Security; CrowdStrike Falcon; SOAR / automation.
  • Leadership & Frameworks: People leadership; Customer management; MITRE ATT&CK; NIST CSF / NIST 800-61; ISO 27001 / ITIL.

Nice to Have

• Experience leading an MSSP/MDR or multi-customer SOC environment.
• Experience managing geographically distributed, multicultural or hybrid teams.
• Background in SOC transformation, service transition, technology migration or operating-model design.
• Commercial awareness, including scope management, resource forecasting and service financials.
• Experience supporting regulatory, audit, cyber insurance or customer assurance requirements.
• Relevant certifications such as CISSP, CISM, GIAC GSOM, GCIH, Microsoft SC-200, ITIL or ISO 27001 Lead Implementer.s.

Build a career tailored to you

• In a diverse working environment that enables continuous development and learning;
• Through a personalized career development plan (skills, technical and functional opportunities), aligned with your stage, needs, and goals;
• By participating in national and international projects with significant scale and impact in this area of specialization;
• Unlimited access to leading online learning platforms (LinkedIn Learning and Udemy);
• Opportunities for training and certifications in the latest technologies, particularly Cloud technologies.

Experience a culture of togetherness

• A culture of innovation and excellence that makes us leaders and trendsetters;
• A friendly environment built on respect, trust, transparency, and informality;
• A lifelong network that connects you to top knowledge alongside leaders and specialists;
• An opportunity to be part of our communities (Tech, innovation, sports, and other interests) and actively participate in social responsibility initiatives.

About Deloitte 

At Deloitte, you will never work alone. You will have the opportunity to join diverse transformation projects and be part of a team that will inspire you and help you develop innovative solutions in a dynamic and collaborative environment, where you can give your best and benefit from our well-being and flexibility initiatives. We are more than 5,500 people in Portugal, of whom over 2,600 work in technology areas, from our offices and Digital Studios in Lisbon, Porto, Braga, Viseu, Coimbra, and Faro, as well as our technology hubs in Braga. In addition, our teams in Portugal have an international reach, demonstrating our strong global leadership in low-code/no-code solutions, telecommunications network engineering, organizational transformation technology platforms (ServiceNow and Apptio), and the financial services industry (Finastra, TIA, and Guidewire). If you are interested in exploring and developing your skills in any of these technology areas – software engineering, cloud, systems integration, data analytics & data science, cyber risk, telecommunications network engineering, UX design – and would like to work with technologies such as AWS, Google, Oracle, Salesforce, SAP, MuleSoft, Feedzai, and SAS, among others, then you are in the right place!

Learn more at www.deloitte.com/pt/careers.

Keywords: About Deloitte; Consulting; Technology

#LI-HYBRID #LI-CA1 #TECHDTT #Experienced