The Opportunity:
Iru is building a next-generation Security Operations function to support a modern SaaS platform spanning Identity, Endpoint Management, EDR, and cloud-native infrastructure.
We are seeking a SOC Manager to lead and mature a hybrid SOC model, combining internal capabilities with our MDR partner (Managed SOC Provider). This role is accountable for defining how security operations run at Iru—owning governance, detection strategy, incident response, and operational excellence.
You will act as the central owner of security operations, ensuring we have strong visibility, fast response, and continuous improvement across our environment.
SOC Governance & Operating Model
Define and operationalize the SOC mission, scope, and service boundaries
Establish a clear roles, responsibilities, and escalation hierarchy
Build and maintain a RACI model across internal teams and Managed SOC Provider
Own the effectiveness and maturity of Iru’s hybrid SOC model
Operational Ownership & Execution
Clearly define and enforce ownership across:
Detection engineering
Threat intelligence
Tier 1 alert triage
24/7 monitoring
Incident response leadership
Threat hunting
Escalation investigations
Establish and manage the “first call” model for security incidents at Iru
Serve as incident commander for high-severity events or delegate appropriately
MDR (Managed SOC Provider) Management
Own the operational relationship with Managed SOC Provider
Ensure alignment on:
Alert triage quality and consistency
Escalation thresholds and timelines
Detection coverage across environments
Incident response coordination
Hold Managed SOC Provider accountable to defined SLAs and performance expectations
Continuously improve MDR effectiveness through feedback loops and tuning
Detection Engineering
Build and maintain a central detection catalog
Align detections to MITRE ATT&CK where applicable
Partner with internal teams and Managed SOC Provider to:
Develop new detections
Tune and optimize existing rules
Reduce false positives and noise
Ensure detection coverage across:
Identity (Iru Identity, Entra)
Endpoint (EM / EDR)
Cloud (AWS)
SaaS and integrations
Data & Telemetry Strategy
Maintain a complete inventory of all telemetry sources across:
Endpoint, Identity, Cloud, Network, SaaS
For each data source:
Define system owner
Confirm ingestion into Panther SIEM
Validate data quality and coverage
Drive onboarding of new log sources to close visibility gaps
Incident Response Framework
Design and maintain Iru’s incident response framework, including:
Incident classification and severity model
Evidence collection standards
Containment and remediation procedures
Recovery processes
Post-incident review and lessons learned
Ensure consistent execution across internal teams and Managed SOC Provider
Runbooks & Playbooks
Develop and maintain:
Alert triage procedures
Investigation runbooks
Incident response playbooks
Ensure all runbooks are actionable, tested, and continuously improved
Threat Intelligence & Hunting
Integrate threat intelligence into detection and response workflows
Define ownership model for threat intelligence (internal vs MDR)
Establish proactive threat hunting capabilities
Evaluate and integrate external threat hunting services as needed
SOC Metrics & Reporting
Define and track key SOC KPIs:
Mean Time to Detect (MTTD)
Mean Time to Respond (MTTR)
Alert volume and trends
False positive rates
Detection coverage and gaps
Provide regular reporting to Security Leadership and executive stakeholders
Use metrics to drive SOC maturity and continuous improvement
Prior experience helping mature or build a security operations program from the ground up.
Background in threat hunting or detection engineering.
Experience integrating Wiz or similar cloud posture management tools into a SIEM workflow.
Knowledge of security automation frameworks, including alert enrichment and workflow orchestration.
Hands-on experience supporting hybrid (Mac + Windows) endpoint environments.
Sur i-Run, profitez de chaussures de sport et d'�quipements de grandes marques : Nike, Asics, Adidas, Hoka, ..., pour le Running, Trail, Randonn�e et Fitness. Livraison 24h !
Jobr aggregates jobs directly from company career portals — no middlemen. Our team applies on your behalf with AI-tailored resumes, reviewed by a human before submission.