Security Operations Center Program Manager
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.1
Reclaim your time by letting our AI handle the grunt work of job searching.
We continuously scan millions of openings to find your top matches.
Overview
Job Description
About PUNCH:
We're problem solvers first & foremost. PUNCH's origin story involves frustration with available INFOSEC tools and techniques—we came up thru the industry using these inefficient tools and decided there had to be a better way. We bring this laser focus on efficiency to every customer engagement.
We have trust as a hallmark in everything we do. PUNCH provides its team members with the maximum amount of ownership over their careers, the direction of the company, and the flexibility & freedom to accomplish their job without interference. Trust requires accountability; we live that, company-wide.
We back each other up. PUNCH is a supportive place to work. We've worked hard to create an environment that makes people better, encourages teamwork, and rewards a “pitch in” mentality.
We give back. To those in need. To the community. To the industry.
Does this sound like you?
Role Overview:
PUNCH is seeking a seasoned SOC Manager to lead a large-scale, 24/7 Security Operations Center (SOC) in support of a large U.S. Government agency. The SOC includes two major functional units—an operational team (monitoring, detection, and incident response) and a threat analysis team (hunting, malware analysis, intelligence integration). You must possess a SECRET security clearance.
This leadership role is ideal for someone who has operated at scale - running SOCs in complex hybrid (on-prem/cloud) environments—and who understands the tactical, strategic, and organizational levers of effective cyber defense. The ideal candidate is a builder, mentor, and communicator who thrives in high-tempo mission spaces and can manage teams across shifts and specializations.
Responsibilities:
- Manage the full operational lifecycle of a 24/7 SOC supporting a critical federal mission
- Lead subordinate managers and analysts across SOC Operations and Threat Hunt/Analysis teams
- Drive strategy, staffing, workflow optimization, and process improvement within the SOC
- Oversee incident response activities in alignment with all five functions of the NIST Cybersecurity Framework
- Maintain readiness for hybrid environments (on-premises and cloud infrastructure)
- Coordinate escalations, shift transitions, and analytic coverage across rotating teams
- Communicate with senior government leadership, external mission partners, and internal stakeholders
- Implement and track performance metrics aligned to mission impact and SOC maturity
- Identify risks, gaps, and opportunities for automation, upskilling, and tooling improvements
- Ensure compliance with Treasury security policies and federal standards
Required Qualifications:- Bachelor's degree (or 3 additional years of experience in lieu of degree)
- 10+ years of SOC management experience, including 5+ years managing hybrid (on-prem/cloud) SOCs
- 10+ years of experience in incident response across enterprise-scale environments (50,000+ endpoints)
- Deep familiarity with NIST Cybersecurity Framework and federal incident response protocols
- Demonstrated success influencing practices and communicating with senior stakeholders
- Experience leading large, distributed teams in a mission-critical setting
Preferred:
- Experience supporting Department of Treasury or other federal financial agencies
- Familiarity with SIEM, SOAR, EDR, and threat intel platforms
- Active certification such as CISSP, CISM, or GIAC
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.
