Cybersecurity Operations Supervisor

About the role

A Cybersecurity Operations Supervisor at FTI is responsible for overseeing the day-to-day workflow of the cybersecurity team, managing the queue of security alerts, operational tickets, and routine maintenance tasks. They ensure consistent monitoring, triage, and resolution of security events across all environments. This role requires technical expertise in security operations, incident response, and tool engineering to drive the continuous maturity of the organization's security stack.

Responsibilities

• Oversee the day-to-day workflow of the cybersecurity team, managing the queue of security alerts, operational tickets, and routine maintenance tasks.
• Ensures consistent monitoring, triage, and resolution of security events across all environments.
• Manages team schedules, on-call rotations, and shift hand-offs to ensure uninterrupted operational coverage.
• Serves as an escalation point for complex technical issues, unblocking team members during daily operations.
• Drives implementation and/or the continuous tuning, optimization, and maturity of security tools (e.g. IAM, IGA, PAM, SIEM, EDR, IDS/IPS, Email Gateways, Vulnerability Scanners, etc…).
• Validates that all security tools are healthy, fully deployed, and effectively communicating with logging and monitoring systems.
• Serves as an escalation point for complex technical issues, unblocking team members during daily operations.
• Directs tactical incident response efforts; leads the team through preparation, detection & analysis, containment, eradication, recovery, and post-incident activity.
• Executes the tactical components of the Cybersecurity Strategy and Roadmap, breaking down high-level goals into actionable, day-to-day projects for the team.
• Continually identifies, evaluates, and remediates active vulnerabilities and threats that could affect operational and business activities.
• Carrries out supervisory responsibilities including interviewing, hiring, training, assigning work, appraising performance, and resolving team problems.
• Mentors team members, elevating their technical skill sets through guidance, cross-training, and professional development plans.
• Creates and Maintains documentation for daily operations, including standard operating procedures (SOPs) and incident response playbooks.
• Provides operational metrics and reporting (e.g., mean time to detect/respond, alert volumes, tool health) to the Cybersecurity Manager.
• Acts as a trusted operational advisor to Service Desk support, networking, and infrastructure teams to ensure secure BT operations.
• Serves as business liaisons to departments and lines of business on topics related to Cybersecurity.
• Stays current on the latest threat landscapes, tools, and methodologies to ensure the team's operational tactics remain highly effective.
• Researches, attends conferences and vendor learning events, and trains to continually improve skill and knowledge of tools, trends, technologies, strategies, and methodologies in security related domains.
• Performs other related duties as required and assigned.

Requirements

• Education: Bachelor Degree or Associate Degree in Information Technology, Information Systems, Computer Science, or equivalent.
• Experience: 5-7 years in IT, including 3-5 years in cybersecurity, 2+ years applying frameworks (NIST CSF, CIS, MITRE ATT&CK), and experience in a lead or mentoring role.
• Travel: 5-10%
• Work Schedule: This position works between the hours of 7 AM and 5 PM, Monday- Friday. However, work may be performed at any time on any day of the week to meet business needs.

Qualifications

• Technical expertise in security operations, incident response, and tool engineering.
• Ability to drive the continuous maturity of the organization's security stack.
• Experience in a lead or mentoring role.
• Experience in applying frameworks (NIST CSF, CIS, MITRE ATT&CK).
• Experience in managing team schedules, on-call rotations, and shift hand-offs.
• Experience in directing tactical incident response efforts.
• Experience in validating that all security tools are healthy, fully deployed, and effectively communicating with logging and monitoring systems.
• Experience in executing the tactical components of the Cybersecurity Strategy and Roadmap.
• Experience in identifying, evaluating, and remediating active vulnerabilities and threats.
• Experience in carrying out supervisory responsibilities.
• Experience in mentoring team members, elevating their technical skill sets through guidance, cross-training, and professional development plans.
• Experience in creating and maintaining documentation for daily operations.
• Experience in providing operational metrics and reporting.
• Experience in acting as a trusted operational advisor to Service Desk support, networking, and infrastructure teams.
• Experience in serving as business liaisons to departments and lines of business on topics related to Cybersecurity.
• Experience in staying current on the latest threat landscapes, tools, and methodologies.
• Experience in researching, attending conferences and vendor learning events, and training to continually improve skill and knowledge of tools, trends, technologies, strategies, and methodologies in security related domains.

Skills

• Technical expertise in security operations, incident response, and tool engineering.
• Ability to drive the continuous maturity of the organization's security stack.
• Experience in managing team schedules, on-call rotations, and shift hand-offs.
• Experience in directing tactical incident response efforts.
• Experience in validating that all security tools are healthy, fully deployed, and effectively communicating with logging and monitoring systems.
• Experience in executing the tactical components of the Cybersecurity Strategy and Roadmap.
• Experience in identifying, evaluating, and remediating active vulnerabilities and threats.
• Experience in carrying out supervisory responsibilities.
• Experience in mentoring team members, elevating their technical skill sets through guidance, cross-training, and professional development plans.
• Experience in creating and maintaining documentation for daily operations.
• Experience in providing operational metrics and reporting.
• Experience in acting as a trusted operational advisor to Service Desk support, networking, and infrastructure teams.
• Experience in serving as business liaisons to departments and lines of business on topics related to Cybersecurity.
• Experience in staying current on the latest threat landscapes, tools, and methodologies.
• Experience in researching, attending conferences and vendor learning events, and training to continually improve skill and knowledge of tools, trends, technologies, strategies, and methodologies in security related domains.

Benefits

FTI offers a comprehensive benefits package, including industry-leading benefits as an investment in the lives of team members and their families. You're invited to review the full list of FTI benefits available to regular/full-time team members.

Pay

TBD

Schedule

This position works between the hours of 7 AM and 5 PM, Monday- Friday. However, work may be performed at any time on any day of the week to meet business needs.