{"id":1493663,"url":"https://alion.io/job/rubrik-senior-manager-security-operations-center","title":"Senior Manager, Security Operations Center","company":{"id":1145,"name":"Rubrik","domain":"rubrik.com","url":"https://alion.io/company/rubrik","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":88,"open_postings":22,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":44,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Palo Alto, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":180000,"max_usd":348000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"FedRAMP","optional":false},{"name":"ISO 27001","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"AI Agents","optional":true},{"name":"Fine-tuning","optional":true},{"name":"LLM Guardrails","optional":true}],"status":"live","first_seen_at":"2026-09-29T22:35:17Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-20T09:14:18Z","board_verified":true,"closed_at":null,"days_open":20,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":20},"description":"About the team:\nThe Information Security organization advances the overall state of security at Rubrik through critical initiatives and coordination of large security projects. Information Security builds technologies, tools, and processes to better enable teams at Rubrik to develop secure software and protect data and systems with appropriate security controls. Information Security also develops systems to monitor and respond to attacks against our assets, provides awareness education to teams on security best practices for data protection, and ensures data governance and data sharing relationships with third parties in order to securely protect Rubrik information. \nAbout the role:\nRubrik is hiring a Senior Manager to lead our Security Operations Center, including our FedRAMP-authorized environment. Incident response sits at the core of what the SOC does, alongside detection and monitoring, and this role owns all of it. You'll inherit a SOC that has already grown a lot in scale and maturity, and your job is to take it further: stronger detection and incident response, broader coverage as our environment gets more complex, and a real strategy for AI in the SOC.\nDriving our AI SOC transformation is a core part of this role. You'll be the one setting the strategy for how AI enables the SOC: scaling coverage beyond what headcount alone could support, reducing alert fatigue on L1 analysts, and giving analysts more room to focus on complex investigations and incident response.\nYou'll also own SOC leadership for our FedRAMP environment: same detection, incident response, and operational rigor, applied to the teams and processes inside that compliance boundary.\nWhat you'll do:\nTeam Leadership & Development-\nHire, train, mentor, and evaluate SOC analysts across both commercial and FedRAMP-scoped teams.\nBuild a culture of collaboration, ownership, and continuous learning within the SOC.\nKeep an eye on signal quality and analyst experience so analysts are working real alerts, not chasing noise.\nDevelop career paths, training programs, and succession planning for SOC analysts.\nMonitoring & Incident Response-\nDirect 24/7 monitoring and make sure coverage stays consistent across shifts and regions.\nServe as Incident Manager for major security incidents, leading the response and collaborating across InfoSec teams as needed during investigations.\nDrive continuous improvement of SOC processes, including incident response playbooks, runbooks, and escalation procedures.\nMake sure incident response processes hold up to the extra rigor FedRAMP requires.\nAI SOC Strategy & Tooling-\nOwn the roadmap for AI-enabled SOC capabilities: AI-assisted triage, investigation support, response automation.\nDeploy AI/ML and automation to cut down L1 toil and alert fatigue, so analysts spend more time on complex investigations.\nWork with Threat Operations and Security Engineering to evaluate, pilot, and roll out AI SOC tools.\nEnable the safe use of AI tools internally, while building the SOC's ability to detect and defend against AI-enabled threat actors.\nDetection Tuning & Coverage Expansion-\nPartner with Threat Operations to grow detection maturity and expand coverage as the Rubrik environment grows (cloud, SaaS, on-prem, and FedRAMP systems).\nWork with Threat Operations to close detection gaps, cut false positives, and keep detections aligned to current threat intel and MITRE ATT&CK.\nFeed incident findings back to Threat Operations to drive continuous improvement of detection logic.\nClose the loop with Security Engineering to bring in additional logging based on incident and investigation data.\nStrategy & Operations Management-\nSet the direction and operating model for a modern SOC.\nOwn planning, budgeting, staffing, and resource allocation, including for the FedRAMP-scoped team.\nTrack and report on key metrics like MTTD (mean time to detect) and MTTR (mean time to respond), analyst workload, and detection coverage.\nKeep evolving the operating model as the company scales.\nTool & Technology Evaluation-\nMake the strategic calls on SIEM/SOAR platforms and automation.\nOwn the SOC's technology roadmap, including build-vs-buy decisions, vendor evaluation, and integration with the broader security stack.\nExecutive Reporting & Stakeholder Communication-\nGive the CISO and executive leadership regular updates on security posture, SOC performance, and notable threats.\nRepresent the SOC in cross-functional and executive settings, translating technical detail into business risk.\nCompliance & Audits-\nSupport FedRAMP and other security audits: evidence collection, control validation, remediation tracking for the SOC's scope.\nBuild and maintain compliance and operational hygiene reporting for both commercial and FedRAMP environments.\nMake sure SOC processes and documentation hold up to regulatory and contractual requirements.\nExperience you'll need:\n8+ years in security operations, incident response, or a related field, including prior experience leading a SOC, incident response included, in a management or senior lead role.\nExperience serving as an Incident Manager, leading incident investigations and coordinating across teams under pressure.\nExperience building or maturing a SOC operating model: 24/7 coverage, playbooks, escalation processes.\nHands-on background in detection and response, with real fluency in SIEM/SOAR platforms and common attacker tactics and techniques (MITRE ATT&CK).\nExperience managing and developing SOC analysts, including hiring, mentoring, and performance management.\nA track record of defining and reporting SOC metrics (MTTD, MTTR, coverage, etc.) to both technical and executive audiences.\nExperience supporting compliance frameworks and audits (FedRAMP, SOC 2, ISO 27001, or similar). Direct FedRAMP experience is a strong plus.\nStrong communication skills and comfort briefing executive leadership and cross-functional stakeholders on posture and incidents.\nMust be a U.S. citizen, as required for FedRAMP responsibilities.\nPreferred qualifications:\nDirect experience evaluating, piloting, or rolling out AI/ML-driven security tooling: AI-assisted triage, automated investigation, GenAI copilots for SOC work, and similar.\nExperience operating within or leading a FedRAMP-authorized security function.\nComfort with cloud-native and SaaS environments in addition to traditional on-prem infrastructure.\nCertifications like GCIH, GCFA, CISSP, or CISM are a plus.\nWhat Success Looks Like-\nDetection and response keep maturing while coverage expands across a growing environment.\nAlert fatigue and manual triage on L1 analysts drop, thanks to real AI SOC tooling adoption.\nMTTD/MTTR trends improve, and analyst retention and satisfaction go up with them.\nFedRAMP SOC operations stay clean and audit-ready, with no material findings tied to SOC process gaps.\nA strong bench of SOC analysts, with a clear path for future leaders to grow into.\nThe minimum and maximum base salaries for this role are posted below; additionally, the role is eligible for bonus potential, equity and benefits. The range displayed reflects the minimum and maximum target for new hire salaries for the role based on U.S. location. Within the range, the salary offered will be determined by work location and additional factors, including job-related skills, experience, and relevant education or training.\nUS Pay Range\n$212,800—$319,200 USD\nJoin Us in Securing and Accelerating the World's AI Transformation\nRubrik (RBRK), the Security and AI Operations Company, leads at the intersection of data protection, cyber resilience, and enterprise AI acceleration. Rubrik Security Cloud delivers complete cyber resilience by securing, monitoring, and recovering data, identities, and workloads across clouds. Rubrik Agent Cloud accelerates trusted AI agent deployments at scale by monitoring and auditing agentic actions, enforcing real-time guardrails, fine-tuning for accuracy and undoing agentic mistakes. \nLinkedin | X (formerly Twitter) | Instagram | Rubrik.com\nInclusion @ Rubrik\nAt Rubrik, we are dedicated to fostering a culture where people from all backgrounds are valued, feel they belong, and believe they can succeed. Our commitment to inclusion is at the heart of our mission to secure the world’s data.\nOur goal is to hire and promote the best talent, regardless of background. We continually review our hiring practices to ensure fairness and strive to create an environment where every employee has equal access to opportunities for growth and excellence. We believe in empowering everyone to bring their authentic selves to work and achieve their fullest potential.\nOur inclusion strategy focuses on three core areas of our business and culture:\nOur Company: We are committed to building a merit-based organization that offers equal access to growth and success for all employees globally. Your potential is limitless here.\n\nOur Culture: We strive to create an inclusive atmosphere where individuals from all backgrounds feel a strong sense of belonging, can thrive, and do their best work. Your contributions help us innovate and break boundaries.\n\nOur Communities: We are dedicated to expanding our engagement with the communities we operate in, creating opportunities for underrepresented talent and driving greater innovation for our clients. Your impact extends beyond Rubrik, contributing to safer and stronger communities.\n\nEqual Opportunity Employer/Veterans/Disabled\nRubrik is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, protected veteran status, or any other status protected by applicable law. Rubrik provides equal employment opportunities to employees and applicants in all terms and conditions of employment, including recruiting, hiring, promotion, compensation, training, leave, and termination.\nRubrik provides reasonable accommodations to qualified applicants and employees with disabilities in accordance with applicable law. If you need an accommodation to participate in the application process or to perform your job, please contact . Accommodations may include changes to the application process, documents in an alternate format, a sign language interpreter, or specialized equipment.\nEEO IS THE LAW\nNOTIFICATION OF EMPLOYEE RIGHTS UNDER FEDERAL LABOR LAWS","description_format":"text","description_chars":10452,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Cloud Security","Backup & Disaster Recovery"],"lifecycle":[{"event":"open","at":"2026-09-30T01:25:48Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 113 · green card filings: 25","filings_12m":113,"filings_prev_12m":117,"green_card_filings_12m":25,"median_offered_wage_usd":191594,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":54,"band":"ok","label":"Likely open","p_open":1,"p_active":0.599,"p_room":0.9,"age_days":20,"expected_fill_days":44,"reasons":["conf:0","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/rubrik-senior-manager-security-operations-center","json_url":"https://alion.io/job/rubrik-senior-manager-security-operations-center.json","meta":{"generated_at":"2026-10-20T09:46:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10701,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1145},"rest":"https://alion.io/mcp/rest/get_company?id=1145"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frubrik-senior-manager-security-operations-center"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frubrik-senior-manager-security-operations-center"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frubrik-senior-manager-security-operations-center"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rubrik-senior-manager-security-operations-center\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frubrik-senior-manager-security-operations-center"}]}