Managing Engineer, Cyber Defense
POSITION SUMMARY
The Manager, Cybersecurity Operations provides operational leadership and oversight for the enterprise cybersecurity program. This role supports the development, implementation, and enforcement of technical security controls across all company locations while overseeing cyber defense systems, tools, and technologies. The Manager coordinates cybersecurity incident response, manages elevated security events, drives process improvements, and maintains critical stakeholder relationships.
Essential Functions
- Hiring, mentoring, and coaching a diverse team of security analysts and engineers in multiple locations.
- Support an enterprise threat intelligence program to assess the threat landscape.
- Direct development, implementation, and enforcement of technical security controls.
- Support enterprise security projects and process improvements.
- Drive use of AI tools / systems to increase detection speed and reduce alert fatigue.
- Incident Response & Operations Management
- Supervise day-to-day cyber defense operations.
- Lead response actions for elevated cybersecurity events and incidents.
- Lead hypothesis-driven hunts across enterprise networks and cloud environments to identify hidden threats.
- Cook up coordination detection and response automation efforts.
- Create and mature incident response runbooks and conduct tabletop exercises to ensure team readiness.
- Security Monitoring & Analysis
- Monitor and analyze SIEM alerts.
- Assess vulnerabilities and coordinate remediation.
- Ensure compliance with security standards and policies.
- Stakeholder Collaboration & Risk Management
- Collaborate with Exposure Management and other stakeholders to understand attack surface.
- Ensure security is embedded in application and engineering workflows.
- Support audits and third-party assessments.
- Technology & Vendor Management
- Evaluate and manage third-party Managed Security Service Providers (MSSPs) to maintain high service quality and SLA compliance.
- Evaluate new security technologies.
- Manage vendor relationships and licensing.
- Leadership & Business Support
- Provide people leadership and performance management.
- Support budgeting, procurement, and forecasting.
Knowledge, Skills & Abilities
- Education: Master's degree in Cybersecurity, Information Technology, Computer Science, or equivalent depth of cybersecurity engineering experience.
- Experience: 8+ years in security operations, incident response, or cybersecurity roles with multi-platform ownership and proven enterprise impact.
- Certifications (preferred): ISC2 Certified Information Systems Security Professional (CISSP), ISACA Certified Information Security Manager (CISM) or similar.
- Skills And Abilities: Curiosity and willingness to learn new technologies, including use of AI and AI-enabled security capabilities. Domain expertise (identity, endpoint, email, cloud, network, data protection, etc). Expert understanding of identity threats (MFA fatigue, token theft, OAuth abuse), email threats, EDR evasion, and cloud/system misconfigurations. Demonstrated leadership of large-scale incident response actions, detection / resiliency initiatives with measurable risk reduction. Ability to solve complex cybersecurity operational problems without guidance. Master-level executive communication, risk storytelling, stakeholder influence, and cross-functional leadership. Ability to quickly organize and manage multiple competing tasks simultaneously. Ability to translate adversary TTPs into engineering changes for security tools.
Physical And Mental Demands
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential job responsibilities. For those working on-site, they will have a well-lit, ventilated and climate-controlled office environment with routine office equipment; some equipment has moving mechanical parts. Noise level in the work environment is typical for an office and/or hospital environment In hospital environment, the individual may be exposed to hazards and unusual elements, which may include but are not limited to bloodborne pathogens and / or contagious illnesses, toxic chemicals, and biohazardous materials which may require extensive safety precautions and the use of protective equipment.
Work Environment And Travel Requirements
The work environmental characteristics described here are representative of those that an employee may encounter while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential job responsibilities. For those working on-site, they will have a well-lit, ventilated and climate-controlled office environment with routine office equipment; some equipment has moving mechanical parts. Noise level in the work environment is typical for an office and/or hospital environment In hospital environment, the individual may be exposed to hazards and unusual elements, which may include but are not limited to bloodborne pathogens and / or contagious illnesses, toxic chemicals, and biohazardous materials which may require extensive safety precautions and the use of protective equipment.