Senior Manager, Cyber Security - US

Job Summary

As a Senior Cyber Security Manager, you will lead a technical cybersecurity team responsible for enterprise security engineering, security tooling operations, and exposure/vulnerability management within the Global Enterprise Security Program.

About the Role

You will own the security tool portfolio, including configuration, administration, integration, tuning, coverage management, platform health, lifecycle planning, and continuous improvement of key cybersecurity capabilities such as EDR, NDR, IDPS, vulnerability scanning, exposure management, security monitoring, cloud security tooling, and related detection/control platforms.

Responsibilities

• Manage or operate enterprise security tools such as EDR, NDR, IDPS/IPS, vulnerability scanners, exposure management platforms, SIEM/SOAR integrations, cloud security tooling, asset inventory/CAASM, and security monitoring platforms.
• Audit security tools to ensure they are deployed correctly, producing expected telemetry, integrated with downstream platforms, tuned appropriately, and delivering intended security outcomes.
• Lead technical teams responsible for security engineering, security operations tooling, vulnerability management, detection engineering, incident investigation, or infrastructure/cloud security.
• Translate technical findings into operational plans, remediation priorities, risk decisions, and executive-level reporting.
• Provide technical guidance to employees, colleagues, and customers.
• Participate in business continuity planning, data loss prevention, and fraud prevention.
• Manage the development and implementation of global security policy, standards, guidelines, and procedures to ensure ongoing maintenance of security.
• Oversee incident response planning and the investigation of security breaches, assisting with disciplinary and legal matters associated with such breaches as necessary.
• Work with outside consultants for independent security audits.

Qualifications

• Bachelor’s degree in computer science, engineering, or related technical discipline required.
• CISSP, CISM, CRISC, OSCP, GPEN, or equivalent certification desirable.
• 10+ years of relevant technical work experience required.
• 4+ years of relevant technical management experience required.
• Experience owning enterprise security tools, vulnerability management programs, operational metrics, vendor relationships, and cross-functional remediation outcomes required.
• Hands-on technical security depth is required; candidates should be able to evaluate whether security tools are properly deployed, integrated, tuned, monitored, and delivering expected coverage and risk reduction outcomes.
• Strong understanding of vulnerability management lifecycle practices, including asset discovery, authenticated scanning, vulnerability validation, CVSS/EPSS/exploitability-based prioritization, remediation tracking, exception management, SLA governance, and executive reporting.