{"id":3780507,"url":"https://alion.io/job/nelnet-security-operations-center-soc-manager","title":"Security Operations Center (SOC) Manager","company":{"id":15352,"name":"Nelnet","domain":"nelnet.com","url":"https://alion.io/company/nelnet","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":93,"open_postings":7,"ghost_share":0,"stale_share":0.286,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-11-05T05:54:30Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Lincoln, United States","Centennial, United States","Madison, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":105000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Claude","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Gemini","optional":false},{"name":"Google SecOps","optional":false},{"name":"LogRhythm","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Red Teaming","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":".NET","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"C#","optional":true},{"name":"GCP","optional":true},{"name":"ISO 27001","optional":true},{"name":"NIST 800-53","optional":true},{"name":"NIST CSF","optional":true},{"name":"PCI DSS","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-11-04T00:00:00Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-05T17:29:25Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Nelnet is a diversified and innovative company committed to enriching lives through the power of service as a student loan servicer, professional services company, consumer loan originator and servicer, payments processor, renewable energy solutions, and K-12 and higher education expert.For over 40 years, Nelnet has been serving its customers, associates, and communities.\nThe perks of working at Nelnet go beyond our benefits package. When you join the Nelnet team, you're part of a community invested in the success of each individual. That support comes through in our work, as we are united by our mission of creating opportunities for people where they live, learn, and work.\nNelnet is hiring a Security Operations Center (SOC) Manager to lead the team that detects and investigates cyber threats across a regulated financial services environment that protects the data of millions of customers. You will lead security monitoring, incident response, and threat detection, and you will lead a team of security analysts, incident responders, and threat intelligence specialists.This role fits a hands-on security leader with deep SIEM, detection engineering, and security alerting experience who wants to build a modern, intelligence-driven SOC. You will shape detection strategy, drive automation and SOAR adoption, and partner with Security Engineering, Vulnerability Management, Detection Engineering, Red Team and Risk to protect the confidentiality, integrity, and availability of Nelnet's critical assets. If you thrive on mentoring people, improving mean time to detect and respond (MTTD/MTTR), and making a measurable difference in an organization's security posture, we want to hear from you.\nLead and develop the SOC team\nLead, coach, and mentor security analysts, incident responders, and threat intelligence specialists.\nBuild a collaborative, high-performance, and positive team culture\nSet goals, conduct performance reviews, and identify training and certification needs.\nManage staffing, shift coverage, and on-call schedules to support monitoring and response.\nRun effective SOC operations\nOversee daily security monitoring, alert triage, detection, and analysis of security events.\nDevelop and maintain SOC policies, procedures, playbooks, and workflows.\nManage and optimize the security toolset, including SIEM, SOAR, EDR, and threat intelligence platforms.\nDrive detection engineering and alert tuning to reduce false positives and close visibility gaps.\nDefine, track, and report SOC metrics and KPIs, such as MTTD, MTTR, alert volume, and detection coverage, to security leadership.\nEnsure timely and accurate escalation of incidents in line with Nelnet's incident response plan.\nLead incident response\nLead and coordinate incident response efforts through containment, eradication, and recovery.\nDevelop and maintain the incident response plan, and run regular testing and tabletop exercises.\nConduct post-incident reviews and turn lessons learned into improvements in tooling, process, and detection.\nLead cyber threat intelligence (CTI)\nLead the CTI function, setting intelligence requirements and priorities aligned to Nelnet's business risks and threat landscape.\nProduce and share actionable threat intelligence, including threat actor tracking, indicators of compromise (IOCs), and tactics, techniques, and procedures (TTPs).\nTurn intelligence into detections, hunts, and response playbooks, and brief security leadership on emerging threats.\nParticipate in industry intelligence-sharing communities and partner with external peers on threat information.\nDrive automation and continuous improvement\nIdentify and automate repetitive SOC tasks through SOAR playbooks and scripting.\nApply AI tools such as Codex, Claude, and Gemini to improve SOC processes, alert triage, and investigations, with appropriate human review and data-handling controls.\nAlign detections to frameworks such as MITRE ATT&CK.\nCollaborate across the business\nPartner with Vulnerability Management, Security Engineering, Detection Engineering, Risk Management, IT, and Compliance teams as-well-as individual business units.\nWork with external partners such as law enforcement, industry peers, and managed security vendors as needed.\nLead and collaborate on Purple Teaming exercises to improve security posture.\nRequired qualifications\nBachelor’s degree in computer science, Information Security, OR a related field, OR equivalent practical experience.\n3+ years of cybersecurity experience, including 2+ years working in a Security Operations Center (SOC) is a requirement for this role.\n1+ years of experience leading or managing a team, including team lead or supervisor roles.\nHands-on expertise with SIEM platforms (such as Splunk, Google SecOps, LogRhythm), including investigation, correlation rules, detection engineering, and alert tuning.\nWorking knowledge of SOAR, Firewalls, and EDR platforms (such as CrowdStrike, SentinelOne, or Microsoft Defender).\nProven experience leading incident response efforts from detection through containment, eradication, recovery, and post-incident review.\nSolid understanding of threat intelligence principles and frameworks, including MITRE ATT&CK.\nStrong analytical, problem-solving, and decision-making skills, with the ability to stay calm under pressure in a fast-paced environment.\nExcellent written and verbal communication skills, with the ability to brief both technical teams and executive leadership.\nPreferred qualifications\nProfessional certifications such as CCSP, CISM, BTL1, BTL2, CompTIA (Security+,CySA+), GIAC (GSEC, GCIH, GCIA, GCDA)\nExperience with cloud security monitoring in AWS, Azure, or Google Cloud.\nKnowledge of compliance and security frameworks such as NIST CSF, NIST 800-53, ISO 27001, and PCI DSS.\nExperience with scripting or automation in Python or PowerShell.\nBackground in financial services or another regulated industry.\nExperience with digital forensics, threat hunting, or purple team exercises.\nFamiliarity with AI tools such as Codex, Claude, and Gemini, and how to use them responsibly to improve SOC processes, investigations, and analyst productivity.\nSkills and keywords\nSecurity Operations Center (SOC), SOC Manager, SIEM, SOAR, incident response, threat detection, detection engineering, threat hunting, threat intelligence, cyber threat intelligence (CTI), EDR, MITRE ATT&CK, vulnerability management, cloud security, security automation, Purple Teaming, alert triage, tabletop exercises, TTX, MTTD/MTTR, NIST, ISO 27001, PCI DSS, Python, PowerShell, team leadership, generative AI, AI-assisted investigations, cybersecurity.\nAnnual compensation range for this role is $105,000-$140,000 depending on experience.\nThis position offers a hybrid work option. Nelnet values flexibility and understands the importance of work-life integration. Our hybrid work environment allows associates living within 30 miles of an office location to work remotely for part of the week, while also fostering collaboration and team connection through in-office presence three days per week.\nPlease note that we are unable to provide visa sponsorship for this position. To be considered, candidates must already be authorized to work in the United States without the need for current or future sponsorship.\nOur benefits package includes medical, dental, vision, HSA and FSA, generous earned time off, 401K/student loan repayment, life insurance & AD&D insurance, employee assistance program, employee stock purchase program, tuition reimbursement, performance-based incentive pay, short- and long-term disability, and a robust wellness program. Click here to learn more about our benefits: Benefits & Perks - Nelnet Inc.\nNelnet is committed to providing a welcoming and respectful workplace where all associates have the opportunity to succeed. As an Equal Opportunity Employer, we ensure that all qualified applicants are considered for employment. Employment decisions are made without regard to race, color, religion/creed, national origin, gender, sex, marital status, age, disability, use of a guide dog or service animal, sexual orientation, military/veteran status, or any other status protected by federal, state, or local law. We value the unique contributions of every team member and believe that a positive work environment benefits everyone.\nQualified individuals with disabilities who require reasonable accommodations in order to apply or compete for positions at Nelnet may request such accommodations by contacting Talent Acquisition at 402-486-5725 or .\nNelnet is a Drug Free and Tobacco Free Workplace.\nUse of Artificial Intelligence in Hiring\nWe may use automated or artificial intelligence enabled tools to assist with the initial review of applications, such as identifying relevant skills or experience. These tools are used to support human review and do not make hiring decisions. A recruiter reviews applications and determines which candidates move forward in the hiring process. For more information, see our Privacy Policy and Pre-Use Notice: Automated Tools in Hiring","description_format":"text","description_chars":9103,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Hybrid work","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Security Operations","Commercial & Retail Banks","Business Process Outsourcing (BPO)"],"lifecycle":[{"event":"open","at":"2026-11-05T00:46:02Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":28,"reasons":["conf:5","velocity","win:early"],"computed_at":"2026-11-05T05:54:30Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":true},"html_url":"https://alion.io/job/nelnet-security-operations-center-soc-manager","json_url":"https://alion.io/job/nelnet-security-operations-center-soc-manager.json","meta":{"generated_at":"2026-11-05T19:43:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26487,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":15352},"rest":"https://alion.io/mcp/rest/get_company?id=15352"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnelnet-security-operations-center-soc-manager"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnelnet-security-operations-center-soc-manager"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnelnet-security-operations-center-soc-manager"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nelnet-security-operations-center-soc-manager\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnelnet-security-operations-center-soc-manager"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3780507}},{"tool":"search_jobs","arguments":{"company":"nelnet.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3780507},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}