Cyber Operations Manager- Threat Operations | Remote, USA

Lensa; Houston (TX); Remote; USD 120,000 - 150,000; Full time

Job summary

A leading company is seeking a Cyber Operations Manager for Threat Detection & Response. This role involves overseeing threat detection teams, managing security operations, and mentoring staff. The ideal candidate will have extensive IT and cybersecurity experience, along with relevant certifications. Work is primarily remote, with opportunities for professional development and a commitment to diversity and inclusion.

Benefits

Work/life balance

Professional training resources

Volunteer opportunities

Qualifications

• 12+ years of IT and Information Security experience.
• 5+ years leading Threat Detection & Response teams.
• 3+ years in managed services.

Responsibilities

• Lead 24x7 Threat Detection and Response Analysts.
• Collaborate with customers on reporting and escalations.
• Oversee security of client systems via the Advanced Fusion Center.

Skills

Analytical Skills

Decision-Making

Problem Solving

Education

Security+

CISSP

CISM

Tools

ServiceNow

LogRhythm

Splunk

PowerBI

Job description

Cyber Operations Manager - Threat Operations | Remote, USA

Be among the first 25 applicants. Get AI-powered advice on this job and more exclusive features.

Lensa, the leading career site for job seekers at every career stage, is assisting our client, Optiv, in recruiting professionals. Apply via Lensa today!

The Cyber Operations Manager for Threat Detection & Response is responsible for ensuring early and accurate detection, response, and containment of threats against clients. This technical management role requires deep security knowledge, previous security practitioner experience, systems management skills, service management expertise, and talent management capabilities. The role also involves mentoring, employee development, and continuous improvement of Security Operations services.

How you'll make an impact

• Lead 24x7 Threat Detection and Response Analysts, overseeing operational and strategic planning, resource allocation, and daily operations.
• Collaborate with customers on reporting, stewardship calls, and escalations.
• Enforce policies and procedures related to security, disaster recovery, standards, and services.
• Refine and improve detection, response, and incident response processes.
• Oversee security of client systems via the Advanced Fusion Center (AFC) service.
• Stay updated on vendor updates, expansion opportunities, and technological directions.
• Work with other managers to advance the Security Operations organization and Optiv overall.
• Improve processes and documentation.
• Manage staffing, including recruitment, supervision, scheduling, development, and evaluations.
• Foster an educational environment to advance team knowledge and performance.
• Perform staff performance appraisals.
• Report security control gaps and vulnerabilities to clients promptly.
• Prepare reports on metrics and trends of SLAs and KPIs.
• Stay informed on evolving risks, industry developments, and best practices in cybersecurity.
• Participate in security events and network with industry peers.
• Oversee threat intelligence reporting and data normalization efforts.
• Maintain communication with executives and other leaders about relevant activities.
• Develop and mentor staff, promoting morale and motivation.
• Report to the Director of Security Operations.

Qualifications for Success

• 12+ years of professional IT and Information Security experience.
• 5+ years leading Threat Detection & Response teams.
• 5+ years in cyber operations centers.
• 3+ years in managed services.
• Certifications such as Security+, GSEC, GCIA, GCIH, CISSP, CISM, CISA, or similar.
• Ability to make decisions and solve complex problems under pressure.
• Strong analytical skills and quick decision-making ability.
• Deep understanding of SIEM solutions like LogRhythm, QRadar, Splunk, Exabeam.
• Deep knowledge of EDR solutions such as Crowdstrike, Cylance, Carbon Black, Microsoft ATP.
• Understanding of regulatory compliance standards (NIST, SOX, HIPAA, NERC CIP, PCI, etc.) and laws affecting cybersecurity.
• Knowledge of Security Orchestration, Automation, and Response (SOAR).
• Experience with ticketing and knowledge management systems like ServiceNow.
• Familiarity with ITIL concepts and practices.
• Experience with security analytics platforms like Kibana.
• Experience with reporting tools such as DOMO and PowerBI.

What You Can Expect From Optiv

• A company committed to Diversity, Equality, and Inclusion.
• Work/life balance and professional training resources.
• Opportunity to work on complex, innovative projects.
• Volunteer opportunities through 'Optiv Chips In'.
• Remote work capabilities where applicable.

EEO Statement

Optiv is an equal opportunity employer. All qualified applicants will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age, marital status, genetic information, national origin, disability status, military or veteran status, or any other protected class. We respect your privacy; see our Privacy Notice.

Additional Details

Seniority level: Mid-Senior level

Employment type: Full-time

Job function: Management and Manufacturing

Industries: IT Services and IT Consulting