Security Operations Manager

Position summary:

End-to-end technical owner of the AI Fabrik and Pulse AI managed-operations engagements: target operating model, architecture evolution, delivery governance, and the customer executive interface.

Key Roles & Responsibilities:

• Own the target operating model and its evolution: log architecture, ingestion roadmap (GCP pipes, Redfish EventService, Hubble filtering), and the log-reduction strategy. 
• Govern the 16-member delivery organisation: staffing, succession, capability and quality management. 
• Own executive reporting: QBRs, risk register, continuous-improvement roadmap. 
• Track commercial-adjacent metrics: license utilisation vs 350 GB/day, effort vs scope, and expansion opportunities across both engagements. 
• Champion AI and automation in operations (agentic triage, auto-enrichment) aligned to Gruve's AI SOC practice. 
• Serve as final technical escalation; accountable for audit support and the engagement's security posture. 
• Interlock with Gruve solution engineering and the customer CTO organisation. 

Mandatory Qualifications:

• BE/BTech (CS/IT/E&TC) or equivalent.
• 13–18 years spanning security operations, network/data-center infrastructure and service-delivery leadership. 
• Prior principal/architect role in managed services with platform-architecture ownership (SIEM/SOC). 
• Executive-level communication and negotiation; comfort operating with US-Pacific overlap. 
• Demonstrated delivery governance of 15+ member 247 teams. 

Preferred Qualifications:

• SABSA/TOGAF; CISSP or CISM. 
• MSSP delivery-lead or P&L exposure; applied AI/ML in security operations. 
• Direct experience with US enterprise customers.