Senior Manager SecOps AI SOC Security Platforms

Deloitte Cyber helps clients defend, respond, and recover in an increasingly complex threat environment. As a Senior Manager SecOps, AI SOC & Security Platforms, you will lead advisory, strategy, design, and implementation engagements focused on transforming Security Operations Centers into intelligence-led, automation-driven, and AI-enabled security operations capabilities.

This role requires deep experience across SOC transformation, SIEM, SOAR, security data lakes, data brokers, threat intelligence integration, detection engineering, automation, and agentic AI solutions. The ideal candidate will combine strong consulting skills with hands-on technical experience and the ability to advise senior stakeholders on modern security operations strategy and implementation.

Work you’ll do

As a Senior Manager, you will be responsible for leading complex client engagements across security operations transformation, platform modernization, and AI-enabled SOC initiatives.

You will:

• Lead SecOps and SOC transformation programs, including current-state assessment, target operating model design, technology roadmap development, and implementation planning.
• Advise clients on AI SOC strategy, including the use of automation, analytics, machine learning, GenAI, and agentic AI to enhance detection, triage, investigation, response, and reporting.
• Design and implement modern security operations architectures across SIEM, SOAR, security data lakes, data brokers, threat intelligence platforms, EDR/XDR, NDR, UEBA, CSPM, and CNAPP ecosystems.
• Drive advisory and implementation engagements for platforms such as Splunk, Microsoft Sentinel, Google SecOps / Chronicle, IBM QRadar, Elastic Security, Palo Alto Cortex XSOAR/XSIAM, ServiceNow SecOps, and comparable technologies.
• Define and implement security data strategies, including log source onboarding, normalization, enrichment, routing, retention, cost optimization, and governance.
• Develop detection engineering frameworks, including use case design, MITRE ATT&CK mapping, detection lifecycle management, tuning, and operational metrics.
• Lead implementation of SOAR playbooks and automation workflows for alert triage, enrichment, containment, ticketing, case management, and incident response.
• Advise clients on data broker and telemetry pipeline solutions to support scalable ingestion, filtering, routing, and enrichment of security data.
• Apply hands-on experience with agentic AI solutions for SOC use cases such as autonomous alert investigation, evidence collection, response recommendation, playbook execution, threat hunting, and executive reporting.
• Define governance and control models for AI-enabled SecOps, including human-in-the-loop controls, auditability, model risk considerations, prompt governance, data protection, and responsible AI adoption.
• Work with client CISOs, SOC leaders, platform owners, enterprise architects, and operations teams to align security operations capabilities with business and risk priorities.
• Oversee multiple projects or large, complex engagements, ensuring delivery quality, client satisfaction, budget discipline, and alignment with Deloitte standards.
• Develop senior client relationships, act as a trusted advisor, and influence client strategy across cyber defense and resilience.
• Lead proposal development, sales pursuits, solution shaping, estimations, client presentations, and account expansion opportunities.
• Contribute to practice leadership by developing reusable assets, solution accelerators, AI SOC offerings, implementation methodologies, and talent development plans.
• Mentor managers, consultants, architects, and engineers across SecOps, security analytics, automation, and AI-enabled cyber operations.