Skip to main content
CareerApp
Crane Co.

Sr SOC and IR Manager (Remote or On Site)

Crane Co.

Stamford, CT · Remote · full time · Senior

Listed on Crane Co.’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

A hands-on senior manager role leading a global security operations center and incident response program, responsible for team development, detection and response modernization, and cross-functional coordination. This suits experienced security operations leaders who thrive under pressure, enjoy building and coaching teams, and want to drive automation and process maturity at enterprise scale.

Our summary, not Crane Co.’s wording. The full posting is on their site.

Skills this role names

Log in to see which of these are already on your profile.

What they ask for

Required

  • 7+ years in security operations and incident response
  • 3+ years managing or leading in security operations or incident response
  • Experience designing and running SOC and incident response processes in enterprise and cloud/SaaS environments
  • Knowledge of alert triage, investigation, containment, recovery coordination, and post-incident review
  • SIEM engineering and log normalization expertise
  • Experience with security automation and orchestration (SOAR)
  • Windows and Linux administration fundamentals
  • Networking fundamentals
  • Understanding of identity and access controls (SSO, MFA, conditional access)
  • Ability to lead high-severity investigations as incident commander
  • Executive-ready written and verbal communication
  • Familiarity with privacy, regulatory, and eDiscovery considerations for incident response
  • Project leadership with track record of delivering measurable improvements
  • Availability to support incidents outside standard business hours
  • Willingness to travel domestically and internationally (est. 10% or less)
  • US Person as defined under EAR PART 772 AND ITAR 120.15

Nice to have

  • Degree in a related field or equivalent practical experience
  • Advanced professional security certifications (CISSP, CISM, GIAC or similar)

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.