• Operational Leadership: Lead Security Operations Center activities, ensuring monitoring, triage, investigation, escalation, and response processes are consistent, measurable, and aligned with established procedures and service expectations. 

• AI & Agentic Security Operations: Help shape, build, and operationalize StoneX’s agentic Security Operations platform, partnering with AI engineers and security teams to apply AI and automation across triage, investigation, enrichment, orchestration, and analyst decision support. Ensure capabilities deliver measurable operational value while maintaining appropriate human oversight, governance, and accountability. 

• People & Culture: Build a healthy, accountable, and sustainable team environment where analysts can perform at a high level without burnout becoming an accepted cost of operating a security function. 

• Developing People: Coach and develop analysts, providing regular feedback, clear expectations, growth opportunities, and support that strengthens technical capability, judgment, and confidence. 

• Incident Coordination: Manage escalations and coordinate response activities during priority cybersecurity events, ensuring the right teams and stakeholders are engaged when needed. 

• Operational Continuity: Ensure effective documentation, communication, and handoffs across regions and time zones so important context and accountability aren’t lost between teams. 

• Investigation Quality: Drive consistency and quality across investigations, documentation, and reporting through coaching, review, and clearly defined expectations. 

• Partnership: Work closely with Threat Intelligence and Engineering teams to validate alerts, test detection use cases, improve processes, and strengthen overall detection and response capabilities. 

• Continuous Improvement: Use operational metrics, team feedback, AI, and automation to improve alert quality, reduce unnecessary noise and repetitive work, strengthen processes, and continuously improve both security outcomes and the analyst experience. 

As the Security Operations Center Manager, a typical week might include the following: 

• Spending at least four days in the office engaging directly with analysts, security partners, and other stakeholders. 

• Meeting with analysts to review investigations, operational priorities, challenges, workload, and development opportunities. 

• Reviewing escalations and priority incidents while helping the team make sound decisions and coordinate response activities. 

• Coaching analysts through complex investigations and helping strengthen their technical judgment, documentation, and decision-making. 

• Reviewing operational handoffs and documentation to ensure continuity across regions and time zones. 

• Partnering with Threat Intelligence and Engineering teams to validate detections, investigate recurring issues, and identify opportunities to improve alert quality. 

• Partnering with AI engineers, Detection Engineering, and other security teams to identify, test, and operationalize agentic workflows that reduce manual effort, accelerate investigations, and improve analyst decision-making. 

• Reviewing alert volumes, workloads, operational trends, and team feedback to identify sources of unnecessary friction or fatigue and opportunities where AI, automation, or process improvements can make the team more effective. 

• Contributing to Security Operations Center reporting, metrics, and continuous improvement initiatives. 

• Participating in an on-call rotation and providing after-hours leadership support during major cybersecurity incidents or significant operational events. 

• Occasionally traveling for team meetings, leadership gatherings, or other business needs. 

This job might be for you if: 

• You’re people-centered – you understand that protecting the business starts with taking care of the people doing the work, and you pay attention to workload, operational pressure, alert fatigue, development, and team wellbeing. 

• You’re culture-driven – you want to build a team where people feel supported, accountable, comfortable raising concerns, and excited to continue developing their careers. 

• You’re calm under pressure – when an investigation or incident becomes challenging, people look to you for clarity, direction, and steady leadership. 

• You’re a coach – you enjoy helping analysts strengthen their technical skills, judgment, confidence, and ability to operate independently. 

• You’re operationally minded – you value consistency, strong processes, clear handoffs, measurable outcomes, and disciplined execution. 

• You’re collaborative – you know effective cyber defence depends on strong partnerships between Security Operations, Threat Intelligence, Engineering, and other technology teams, and you’re comfortable working with diverse teams and perspectives across the globe. 

• You’re excited about what’s next – you want to be at the forefront of how AI and agentic technologies are changing security operations, and you’re energized by turning emerging technology into practical capabilities that make analysts and defenders more effective. 

• You’re comfortable making decisions – you can assess the information available, make sound decisions quickly, and adjust as circumstances change. 

• You’re improvement-focused – you challenge unnecessary noise, repetitive work, and inefficient processes rather than accepting burnout and constant firefighting as simply part of security operations.