Security Operations Manager

Responsibilities

• Build and operate the SOC function, including continuous monitoring across AWS GovCloud, GCC, and on-premises environments
• Develop custom detection logic, behavioral analytics, and threat hunting queries aligned to MITRE ATT&CK
• Lead end-to-end incident response, digital forensics, and malware analysis
• Automate security workflows using Python, PowerShell, or Bash and manage SOAR playbooks
• Hire, mentor, and develop a team of security operations analysts and engineers

Requirements

• 5+ years of hands-on SOC operations, incident response, or threat hunting experience
• Proven experience building and operating SIEM and EDR platforms
• Proficiency in Python, PowerShell, or Bash for security automation
• Ability to obtain and maintain a TS/SCI clearance
• U.S. citizenship or lawful permanent resident status (ITAR compliance)

Preferred Qualifications

• Active TS clearance or higher
• Experience with AWS GovCloud and Microsoft GCC environments
• Background in aerospace, defense, or critical infrastructure security

About the Company

Northwood is a modern space infrastructure company building a global network of phased array ground stations to enable real-time, reliable communication for satellite missions including national security and global connectivity.