Telework Eligible: Yes
Education Verification
Working Title: Security Operations Center (SOC) Manager
Job Class: Information Systems Manager
Agency: Minnesota IT Services
Job ID: 97821
Location: St. Paul
Telework Eligible: Yes
Full/Part Time: Full time
Regular/Temporary: Unlimited
Who May Apply: Open to all qualified job seekers
Date Posted: 10/17/2026
Closing Date: 10/26/2026
Hiring Agency/Seniority Unit: Minnesota IT Services
Division/Unit: Enterprise Security
Work Shift/Work Hours: Day Shift
Days of Work: Monday - Friday
Travel Required: No
Salary Range: $46.33 - $79.28 / hourly; $96,737 - $165,536 / annually
Classified Status: Classified
Bargaining Unit/Union: 216 - Middle Management Association/MMA
FLSA Status: Exempt - Executive
Designated in Connect 700 Program for Applicants with Disabilities: Yes
The work you'll do is more than just a job.
At the State of Minnesota, employees play a critical role in developing policies, providing essential services, and working to improve the well-being and quality of life for all Minnesotans. The State of Minnesota is committed to equity and inclusion, and invests in employees by providing benefits, support resources, and training and development opportunities.
Join the 2,800+ professionals of Minnesota IT Services (MNIT) who connect Minnesotans to services that will improve their lives. This position will be part of the Enterprise Security team, which embeds security protection statewide.
The Security Operations Center (SOC) Manager is part of MNIT enterprise security leadership team and oversees the State of Minnesota’s SOC teams that are responsible for defending, detecting, and responding to cybersecurity events impacting Minnesota government statewide. The SOC Manager will also help lead an engaged,



dedicated cybersecurity incident response team protecting State of Minnesota assets from today’s evolving cyber threats. In this role, you will oversee a team of cybersecurity engineers, analysts and incident handlers in the state’s enterprise Security Operations Center (SOC) and work with government partners at all levels to detect and respond to cyber events.
This position oversees portions of the Information Security Incident Response Team (ISIRT) and oversees the planning, execution, and assessment of all Statewide cyber security incident preparation, detection and response policies, procedures and guiding practices to be implemented by all State agencies. The Manager establishes and maintains a comprehensive statewide information security incident response and monitoring program to ensure that all State information assets are adequately protected against current/future internal/external threats. The position is responsible for the strategic and tactical planning, management, testing, and development of prevention controls on an Enterprise-wide basis. Areas include risk assessment, program metrics and reporting, certification and accreditation of program management, development of appropriate policies and procedures for the State. The SOC Manager also oversees the Statewide Security Monitoring Initiative (SSMI)



to provide cybersecurity resources to state and local government partners beyond the MNIT enterprise-supported agencies.
This Position Requires An Employee To Work Onsite At 600 Robert St. N, St. Paul, Minnesota At Least 50% Of The Time, With Limited Telework Available. Telework Eligibility Depends On Residence
Candidates living in Minnesota or within 50 miles of the worksite in a bordering state (Iowa, North Dakota, South Dakota, and Wisconsin) may telework up to 50%.
Minnesota residents living more than 50 miles from the worksite may be eligible to telework more than 50%.
Candidates living 50 miles or more from the worksite in a bordering state are not eligible for hire unless relocating within 50 miles.
Minimum Qualifications To qualify, candidates must clearly show all of the following qualifications in their resume. Resume tips available here:
Position requires a minimum of five (5) years of advanced IT security risk management experience.
Experience Must Include Two (2) years of supervisory experience.
Two (2) years of experience in a Systems Architect classification or two (2) years of experience in an external IT Architect role may substitute for the required supervisory experience.
Experience Must Also Include Security monitoring and incident response management experience.
Experience establishing incident response processes and recommendations including preparation, containment, eradication and recovery
Experience establishing Enterprise-wide information security policies, standards and practices.
Security auditing and/or risk assessment experience.
Large scale project management experience.
Demonstrated ability to communicate clearly and effectively to foster mutual understanding and guide teams through change.
Custome

📌 Soc manager (Saint Paul)
🏢 Minnesota Direct Care and Treatment
📍 Saint Paul