Senior Manager, Security Operations Center

Palo Alto · Palo Alto, CA HQ · USD 212,800-319,200 · 8+ years experience · Posted Sep 29, 2026

At a glance

Rubrik is hiring a Senior Manager to lead our Security Operations Center, including our FedRAMP-authorized environment.
Incident response sits at the core of what the SOC does, alongside detection and monitoring, and this role owns all of it.
Driving our AI SOC transformation is a core part of this role, setting the strategy for how AI enables the SOC.

Hire, train, mentor, and evaluate SOC analysts across both commercial and FedRAMP-scoped teams.
Direct 24/7 monitoring and make sure coverage stays consistent across shifts and regions.
Serve as Incident Manager for major security incidents, leading the response and collaborating across InfoSec teams as needed during investigations.
Own the roadmap for AI-enabled SOC capabilities: AI-assisted triage, investigation support, response automation.
Partner with Threat Operations to grow detection maturity and expand coverage as the Rubrik environment grows.
Own planning, budgeting, staffing, and resource allocation, including for the FedRAMP-scoped team.
Make the strategic calls on SIEM/SOAR platforms and automation.
Give the CISO and executive leadership regular updates on security posture, SOC performance, and notable threats.
Support FedRAMP and other security audits: evidence collection, control validation, remediation tracking for the SOC's scope.

8+ years in security operations, incident response, or a related field, including prior experience leading a SOC, incident response included, in a management or senior lead role.
Experience serving as an Incident Manager, leading incident investigations and coordinating across teams under pressure.
Experience building or maturing a SOC operating model: 24/7 coverage, playbooks, escalation processes.
Hands-on background in detection and response, with real fluency in SIEM/SOAR platforms and common attacker tactics and techniques (MITRE ATT&CK).
Experience managing and developing SOC analysts, including hiring, mentoring, and performance management.
A track record of defining and reporting SOC metrics (MTTD, MTTR, coverage, etc.) to both technical and executive audiences.
Experience supporting compliance frameworks and audits (FedRAMP, SOC 2, ISO 27001, or similar).
Strong communication skills and comfort briefing executive leadership and cross-functional stakeholders on posture and incidents.
Must be a U.S. citizen, as required for FedRAMP responsibilities.

Direct FedRAMP experience is a strong plus.
Direct experience evaluating, piloting, or rolling out AI/ML-driven security tooling: AI-assisted triage, automated investigation, GenAI copilots for SOC work, and similar.
Experience operating within or leading a FedRAMP-authorized security function.
Comfort with cloud-native and SaaS environments in addition to traditional on-prem infrastructure.
Certifications like GCIH, GCFA, CISSP, or CISM are a plus.