Supervisor, Security Operations Center

Requisition ID # 171145 

Job Category: Real Estate / Facilities 

Job Level: Supervisor

Business Unit: Information Technology

Work Type: Onsite

Job Location: Vacaville

 

 

Department Overview

 

Information Systems Technology Services (IT) is a unified organization where teams collaborate to deliver secure, reliable technology and operational outcomes. Corporate Security is fully integrated within the IT function and works closely alongside Cyber Security to protect California’s critical infrastructure—connecting physical, operational, and cyber defense to reduce risk and strengthen resilience. The department is made up of forward-thinking security operators, builders, and creators who design and run protective operations that keep the organization on the forefront of modern security—combining disciplined execution with continuous improvement, innovation, and strong partnerships across the business.

 

Position Summary

 

Reporting to the Security Operations & Access Control Manager, the Security Operations Center (SOC) Supervisor provides day-to-day supervision of a full-scale enterprise security operations center, delivering 24/7 security monitoring and incident response in support of California’s most critical infrastructure.

 

The supervisor leads the SOC Incident Command function and oversees daily incident response execution across employees and contract operators, ensuring consistent, compliant, and high-quality outcomes.

 

As the organization’s primary point of contact for security support, the SOC is often the first line of interaction with PG&E coworkers and plays a critical role in shaping the enterprise security brand and user experience through clear communication, professionalism, and timely service. The supervisor ensures adherence to regulatory requirements, internal policies, and operational standards; maintains accurate documentation and escalation; and coordinates communications during events. They also strengthen SOC capabilities through continuous improvement across people, process, and technology—enhancing detection, response, resilience, and audit readiness.

 

In partnership with the SOC Manager, the supervisor supports the SOC maturity roadmap and helps translate strategy into execution, including staffing, training, and technology improvements that advance SOC operations. They provide leadership and expertise across security functional areas and build strong relationships with Lines of Business to address security and compliance concerns impacting PG&E’s most critical assets. The supervisor also serves as a key integrator across Field Security, Operations teams, and Investigations—coordinating active incident response during emergencies and ensuring seamless handoffs from triage through investigation and resolution.

 

This role is ideal for a combined builder and operator—an innovative people leader who is passionate about leading teams, managing high-impact incidents, and maturing a primary operating function within the security organization.

 

The role is on-site in Vacaville at the Security Operations Center. The working hours are Monday – Friday, normal business hours with varied on-call responsibilities. 

 

Job Responsibilities

 

• Supervises SOC operational procedures, playbooks, and response measures to buy down risk, ensure compliant execution, and maintain adaptability to evolving business needs.
• Directly supervises and develops a SOC organization of approximately 40 (including shift leads and operators), ensuring staffing coverage, clear expectations, and strong on-shift leadership.
• Tracks and reports SOC performance and compliance measures (e.g., response timeliness, documentation quality, and adherence to procedures), escalating trends and recommending improvements.
• Owns day-to-day SOC technology and systems health (e.g., access control, video management, alarm monitoring, and incident management platforms), ensuring uptime, data quality, user readiness, and timely issue triage and resolution in partnership with IT.
• Leads identification, evaluation, and integration of new protective technologies and capabilities (e.g., enhanced monitoring, analytics, automation, and workflow improvements); partners closely with IT and Cyber Security to deliver secure, scalable solutions that improve detection, response, and operator efficiency.
• Supports the SOC technology roadmap and lifecyc