Manager, Cybersecurity Operations

You must be authorized to work in the United States without employer sponsorship.

About the role

The Manager, Cybersecurity Operations provides operational leadership and oversight for the enterprise cybersecurity program. This role supports the development, implementation, and enforcement of technical security controls across all company locations while overseeing cyber defense systems, tools, and technologies. The Manager coordinates cybersecurity incident response, manages elevated security events, drives process improvements, and maintains critical stakeholder relationships.

Responsibilities

• Hiring, mentoring, and coaching a diverse team of security analysts and engineers in multiple locations.
• Support an enterprise threat intelligence program to assess the threat landscape.
• Direct development, implementation, and enforcement of technical security controls.
• Support enterprise security projects and process improvements.
• Drive use of AI tools/systems to increase detection speed and reduce alert fatigue.
• Supervise day-to-day cyber defense operations.
• Lead response actions for elevated cybersecurity events and incidents.
• Lead hypothesis-driven hunts across enterprise networks and cloud environments to identify hidden threats.
• Coordinate detection and response automation efforts.
• Create and mature incident response runbooks and conduct tabletop exercises to ensure team readiness.
• Monitor and analyze SIEM alerts.
• Assess vulnerabilities and coordinate remediation.
• Ensure compliance with security standards and policies.
• Collaborate with Exposure Management and other stakeholders to understand attack surface.
• Ensure security is embedded in application and engineering workflows.
• Support audits and third-party assessments.
• Evaluate and manage third-party Managed Security Service Providers (MSSPs) to maintain high service quality and SLA compliance.
• Evaluate new security technologies.
• Manage vendor relationships and licensing.
• Provide people leadership and performance management.
• Support budgeting, procurement, and forecasting.

Requirements

• Master's degree in Cybersecurity, Information Technology, Computer Science, or equivalent depth of cybersecurity engineering experience.
• 8+ years in security operations, incident response, or cybersecurity roles with multi-platform ownership and proven enterprise impact.
• Certifications (preferred): ISC2 Certified Information Systems Security Professional (CISSP), ISACA Certified Information Security Manager (CISM) or similar.

Skills

• Curiosity and willingness to learn new technologies, including use of AI and AI-enabled security capabilities.
• Domain expertise (identity, endpoint, email, cloud, network, data protection, etc.).
• Expert understanding of identity threats (MFA fatigue, token theft, OAuth abuse), email threats, EDR evasion, and cloud/system misconfigurations.
• Demonstrated leadership of large-scale incident response actions, detection/resiliency initiatives with measurable risk reduction.
• Ability to solve complex cybersecurity operational problems without guidance.
• Master-level executive communication, risk storytelling, stakeholder influence, and cross-functional leadership.
• Ability to quickly organize and manage multiple competing tasks simultaneously.
• Ability to translate adversary TTPs into engineering changes for security tools.

Schedule

Hybrid (4 days on-site / 1 day off, Monday through Thursday). Travel requirements: less than 25%.

Physical and Mental Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential job responsibilities.

• Occasionally required to stand, walk, sit for extended periods, use hands to finger/handle/feel objects/tools/controls, reach with hands and arms, climb stairs, balance, stoop, kneel, bend, crouch, or crawl.
• Occasionally lift and/or move up to 20 pounds.
• Repetitive motion of upper body required for extended use of computers.
• Required specific vision abilities include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.

Work Environment

The work environmental characteristics described here are representative of those an employee may encounter while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential job responsibilities.

• For those working on-site: well-lit, ventilated, and climate-controlled office environment with routine office equipment; some equipment has moving mechanical parts.
• Noise level in the work environment is typical for an office and/or hospital environment.
• In hospital environment, may be exposed to hazards and unusual elements, including but not limited to bloodborne pathogens, contagious illnesses, toxic chemicals, and biohazardous materials which may require extensive safety precautions and the use of protective equipment.