Cybersecurity Manager - SOC

Company Overview

Job Description/Preferred Qualifications

Join Us as Our Next SOC Leader - Drive Global Cyber Defense at Scale

We're looking for a visionary Security Operations Center (SOC) Manager to spearhead our global cybersecurity operations. In this high-impact role, you'll oversee a world-class team of analysts, shape the strategic direction of our threat detection and incident response capabilities, and collaborate with leaders across IT, engineering, and the C-suite to fortify our digital defenses.

At KLA, cybersecurity is more than a function - it's a mission-critical force that protects our innovation, our people, and our customers. As SOC Manager, you'll be at the heart of that mission, leveraging cutting-edge tools, intelligence, and processes to anticipate threats, neutralize risks, and ensure operational resilience across our global footprint.

Key Responsibilities:

• Lead with Impact: Manage and inspire a global team of cybersecurity analysts operating 24/7 to detect, investigate, and respond to security threats in real time.

• Operational Excellence: Design, refine, and enforce SOC processes, playbooks, and escalation protocols to ensure swift and consistent incident handling.

• Optimize the Tech Stack: Oversee the configuration and performance of critical security tools including SIEM, EDR, DLP, IDS/IPS, and threat intelligence platforms.

• Command Incident Response: Direct end-to-end incident response efforts-from detection and containment to root cause analysis and post-incident reviews.

• Grow Talent: Mentor and develop SOC team members through coaching, training, and performance feedback to build a high-performing, resilient team.

• Cross-Functional Collaboration: Partner with IT, engineering, and compliance teams to align SOC operations with business goals and regulatory requirements.

• Data-Driven Leadership: Track and report on SOC metrics, threat trends, and operational KPIs to inform executive decision-making.

• Stay Ahead of the Curve: Continuously monitor the evolving threat landscape and integrate emerging best practices to enhance detection and response capabilities.

Preferred Qualifications:

• Industry-recognized certifications such as CISSP, CISM, GCIH, GCIA, or equivalent.

• Hands-on familiarity with the MITRE ATT&CK framework.

• Working knowledge of regulatory and compliance standards like NIST, ISO 27001, GDPR, or similar.

Minimum Qualifications

• Minimum seven (7) years in cybersecurity, including at least 2 years in a leadership or managerial role within a Security Operations Center (SOC) or incident response team

• Proven track record in incident detection, response, and threat hunting across complex, global environments.

• Deep understanding of security technologies such as SIEM, EDR, antivirus, IDS/IPS, DLP, and forensic analysis tools.

• Excellent leadership and interpersonal skills with the ability to influence and partner across both technical and non-technical teams.

• Willingness to travel up to 25% domestically and internationally as business needs require.

Interns are eligible for some of the benefits listed. Our pay ranges are determined by role, level, and location. The range displayed reflects the pay for this position in the primary location identified in this posting. Actual pay depends on several factors, including state minimum pay wage rates, location, job-related skills, experience, and relevant education level or training. We are committed to complying with all applicable federal and state minimum wage requirements where applicable. If applicable, your recruiter can share more about the specific pay range for your preferred location during the hiring process.

KLA is proud to be an Equal Opportunity Employer. We will ensure that qualified individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us at talent.acquisition@kla.com or at +1-408-352-2808 to request accommodation.

Be aware of potentially fraudulent job postings or suspicious recruiting activity by persons that are currently posing as KLA employees. KLA never asks for any financial compensation to be considered for an interview, to become an employee, or for equipment. Further, KLA does not work with any recruiters or third parties who charge such fees either directly or on behalf of KLA. Please ensure that you have searched KLA's Careers website for legitimate job postings. KLA follows a recruiting process that involves multiple interviews in person or on video conferencing with our hiring managers. If you are concerned that a communication, an interview, an offer of employment, or that an employee is not legitimate, please send an email to talent.acquisition@kla.com to confirm the person you are communicating with is an employee. We take your privacy very seriously and confidentially handle your information.