Lead Service Manager

OPENTEXT - THE INFORMATION COMPANYOpenText is a global leader in information management, where innovation, creativity, and collaboration are the key components of our corporate culture. As a member of our team, you will have the opportunity to partner with the most highly regarded companies in the world, tackle complex issues, and contribute to projects that shape the future of digital transformation.AI-First. Future-Driven. Human-Centered.At OpenText, AI is at the heart of everything we do—powering innovation, transforming work, and empowering digital knowledge workers. We are hiring talent AI can't replace to help us shape the future of information management. Join us.As a global leader in secure information management, OpenText empowers businesses to stay ahead of the ever-evolving cyber threats. Our Cybersecurity Enterprise portfolio is formidable, offering innovative solutions that safeguard organizations from malicious attacks, data breaches, and cyber vulnerabilities. By joining our team, you'll be at the forefront of developing and implementing state-of-the-art security technologies, protecting critical assets and sensitive information for clients worldwide.Your ImpactWe are looking for a Lead Service Manager (SOAR) to reduce analyst manual workloads and increase the speed and consistency of our Managed Security Services (MSS) operations through automation, orchestration, and applied AI. This role is critical to turning manual, repetitive SOC tasks into reliable automated workflows, and to implementing practical AI use cases that free analysts to focus on higher-value work across our 247 multi-tenant MxDR environment and wider MSS. The ideal candidate will combine solid security engineering discipline with a genuine understanding of where automation delivers the most value.What the role offers:As a Lead Service Manager, you will:Identify and prioritize the highest-volume, most repetitive SOC tasks for automation (alert triage, enrichment, case creation, notification, and containment), applying a clear cost-benefit calculus to what is automated and at what level of autonomy.Design, build, test, and maintain SOAR playbooks and integrations on our approved SOAR, spanning the SIEM, EDR, threat intelligence, case management, identity, productivity and collaboration tooling.Implement practical AI use cases across the SOC, including alert summarization, enrichment, triage assistance, and drafting of analyst and client-facing content, with appropriate guardrails and human oversight.Integrate and orchestrate tooling via APIs, webhooks, and structured data, building maintainable connectors across the security stack.Build feedback loops so that automated actions generate data that feeds detection tuning and continuous improvement.Partner with wider MSS teams and specialists to translate manual runbooks into automated workflows with clear human-in-the-loop and human-on-the-loop checkpoints and handoff triggers.Support the safe, governed operation of agentic AI capability, including validation, guardrails, and monitoring of machine-generated output before it is acted on.Establish standards, version control, testing, and documentation for automation content so that playbooks are reliable, maintainable, and auditable.Measure and report automation impact, including improvements to mean time to triage, mean time to respond, analyst hours saved, false-positive reduction, and playbook coverage.What you need to Succeed:5+ years of Security Engineering, SecDevOps, and automation experience delivering and maintaining production-grade security solutions.Hands-on SOAR expertise building and managing playbooks, integrations, and automated response workflows across complex security environments.Strong Python development skills with experience in REST APIs, JSON, webhooks, API integrations, data transformation, and automation frameworks.Deep understanding of SOC operations, alert lifecycle management, and automation opportunities across triage, enrichment, containment, and response.Experience integrating and managing SIEM, EDR, identity, threat intelligence, case management, and collaboration platforms through APIs and automation frameworks.Knowledge of Docker, Kubernetes, Git, testing, peer review, documentation, and security engineering best practices.Experience applying AI, LLMs, and agentic AI frameworks to security workflows, including prompt engineering, guardrails, evaluation, and operational safety.Experience supporting Azure, AWS, and GCP environments within multi-tenant managed services or MDR organizations; familiarity with Devo, Microsoft Sentinel, Splunk, QRadar, FortiSOAR, SplunkSOAR, Cortex XSOAR, Swimlane, SentinelOne, and CrowdStrike. GIAC GPYC and other cloud/security automation certifications are an asset.One last thingOpenText is more than a corporation—it’s a global community built on trust, character, and purpose. Here, we act ethically, care deeply about people, and always put our clients first. We help teams succeed through collaboration, tackle challenges with resilience, and innovate with intention. Join us on our mission to drive positive change through privacy, technology, and teamwork. At OpenText, we don’t just have a culture—we live our values. Choose us because you want to be part of a company that empowers you to make a meaningful impact.OpenText's commitment to diversity and inclusion surpasses legal requirements, evident in our Equal Employment Opportunity Statement of Policy which promotes a respectful and empowering environment for employees of all backgrounds, culture, national origin, race, color, gender, gender identification, sexual orientation, family status, age, veteran status, disability, religion, or other basis protected by applicable laws.If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please submit a ticket at Ask HR. Our proactive approach fosters collaboration, innovation, and personal growth, enriching OpenText's vibrant workplace.Compensation: At OpenText, we offer a thoughtfully designed benefits package that supports your physical, emotional, and financial wellbeing. As you move through the hiring process, we’re happy to provide more details about our compensation programs, including variable and commission compensation opportunities for eligible roles, vacation entitlement, and paid time off.Salary Range: $86,800.00 - $130,200.00; Depending on the candidate’s education, experience, skills, geographical location, and alignment with internal equity and external market, actual salary may vary and be higher or lower than the range posted.AI Usage Disclosure:As part of our commitment to transparency, we use artificial intelligence (AI) tools to assist in various stages of our recruitment process, including resume screening, candidate matching, interview scheduling, and communications. These tools are designed to improve efficiency, reduce bias, and enhance candidate experience. All decisions regarding hiring are made by qualified human professionals, and we continuously monitor our AI systems to ensure fairness and compliance with applicable regulations.Job SummaryJob number: 53798Date posted : 2026-09-28Profession: IT & Cloud OperationsEmployment type: Regular