Manager II Cyber Security

Job Overview

The Manager of Cyber Operations will be an individual contributor that supports the organization's day-to-day security operations function, overseeing threat detection, incident response, vulnerability management, and the team responsible for monitoring and defending the enterprise against cyber threats. This role serves as the operational backbone of the security program, translating strategy set by the Sr. Director of Security Operations and senior security leadership into effective, measurable execution.

#LI-JT1

#hybrid

A Day In The Life

• Lead the day-to-day operations of the Security Operations Center (SOC), directing the work of analysts and engineers responsible for 24/7 monitoring, detection, and response
• Supports the incident response lifecycle detection, triage, containment, eradication, and post-incident review ensuring timely and effective resolution of security events
• Drive vulnerability management programs, including scanning, prioritization, and remediation tracking across the enterprise
• Manage and mature security tooling (SIEM, EDR/XDR, SOAR, OT and threat intelligence platforms) to improve detection coverage and reduce mean time to detect/respond
• Develop, test, and refine incident response plans, playbooks, and tabletop exercises
•  Monitor threat intelligence feeds and adjusts defensive posture based on emerging threats and attack trends
• Track and report key operational metrics (MTTD, MTTR, alert volume, false-positive rates) to the Sr. Director of Security Operations
• Coordinate with IT, infrastructure, and application teams to remediate risks and enforce security controls
• Support audit, compliance, and regulatory requirements related to security operations (e.g., SOC 2, NIST, ZTA)
• Manage relationships with MSSPs, MDR providers, and other third-party security vendors

What will help you thrive in this role?

• Bachelor’s degree in computer science, Information Security, or related field (or equivalent experience)
• 10+ years of experience in cybersecurity operations, with demonstrated experience directing the work of analysts or junior team members
• Hands-on experience with SIEM/EDR platforms, threat detection, and incident response
• Strong understanding of networking, endpoint security, cloud security, and common attack techniques (MITRE ATT&CK familiarity a plus)
• Relevant certifications preferred: CISSP, GCIH, GCIA, CISM, or similar
• Strong communication skills, with the ability to translate technical findings for non-technical stakeholders
• Experience operating in a fast-paced environment with significant technical ownership
• Knowledge of security best practices and industry standards such as NIST, ISO, and CIS.
• Experience with scripting and programming languages such as Python and PowerShell.
• Strong problem-solving and analytical skills.
• Excellent communication and teamwork skills.
• Ability to work independently and manage multiple tasks simultaneously.
• Aptitude for learning and mastering tools and technologies.