SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
iCapital seeks a Security Operations Manager to lead its Security Operations Center (SOC) based in Lisbon, Portugal. This is a hands-on people-management role responsible for day-to-day SOC operations, including monitoring, triaging, and responding to security alerts across global time zones.
Key responsibilities include managing a team of SOC analysts with oversight of scheduling, shift coverage, performance management, hiring, and onboarding. You will establish and maintain runbooks, playbooks, and incident-handling procedures while operating and tuning SIEM and SOAR platforms. The role requires effective incident triage and escalation, close coordination with the Cyber Case Manager to track incidents to closure, and partnership with Threat Detection Engineering, Cloud Security, and Incident Response teams.
You will measure and report on the firm's cyber security posture through operational metrics and leadership reporting, serve as an escalation point for high-severity incidents (including outside business hours), and drive evaluation and configuration of key security tools.
Required qualifications include 5–8 years in security operations with 1–3 years leading or managing a SOC team. You must have demonstrated people-management experience, hands-on SIEM expertise (preferably Splunk), SOAR experience, and understanding of incident-response frameworks (NIST, MITRE ATT&CK). Knowledge of Linux, Windows, and macOS, plus AWS cloud infrastructure experience, is expected. Strong stakeholder-management, communication, and problem-solving skills are essential, with professional English fluency required to support a global team.
The role is hybrid: four days in office, one day remote (Friday). iCapital offers competitive salary, annual performance bonus, equity, 100% employer-paid health and dental insurance, and generous PTO.
