Security Operations Manager

Position summary:

End-to-end technical owner of the AI Fabrik and Pulse AI managed-operations engagements: target operating model, architecture evolution, delivery governance, and the customer executive interface.

Key Roles & Responsibilities:

• Own the target operating model and its evolution: log architecture, ingestion roadmap (GCP pipes, Redfish EventService, Hubble filtering), and the log-reduction strategy.
• Govern the 16-member delivery organisation: staffing, succession, capability and quality management.
• Own executive reporting: QBRs, risk register, continuous-improvement roadmap.
• Track commercial-adjacent metrics: license utilisation vs 350 GB/day, effort vs scope, and expansion opportunities across both engagements.
• Champion AI and automation in operations (agentic triage, auto-enrichment) aligned to Gruve's AI SOC practice.
• Serve as final technical escalation; accountable for audit support and the engagement's security posture.
• Interlock with Gruve solution engineering and the customer CTO organisation.

Mandatory Qualifications:

• BE/BTech (CS/IT/E&TC) or equivalent.
• 13–18 years spanning security operations, network/data-center infrastructure and service-delivery leadership.
• Prior principal/architect role in managed services with platform-architecture ownership (SIEM/SOC).
• Executive-level communication and negotiation; comfort operating with US-Pacific overlap.
• Demonstrated delivery governance of 15+ member 247 teams.

Preferred Qualifications:

• SABSA/TOGAF; CISSP or CISM.
• MSSP delivery-lead or P&L exposure; applied AI/ML in security operations.
• Direct experience with US enterprise customers.