CYBERSECURITY ENGINEERING MANAGER

Cybersecurity Jobs; Tallahassee (FL); On-site; USD 100,000 - 125,000; Full time

Job summary

State of Florida seeks a Cybersecurity Engineering Manager to lead the Cybersecurity Engineering section, driving modernization of the SOC tooling stack and securing enterprise telemetry and data pipelines for threat detection and response.

You will guide engineering operations supporting SOC detection, analysis, and incident response, ensuring tool availability, performance, and security across SIEM, SOAR, and data platforms.

Qualifications

• Bachelor’s degree or equivalent in cybersecurity, CS, information systems, or engineering.
• 6+ years in cybersecurity engineering or security operations engineering for enterprise platforms.
• 2+ years leading or coordinating technical staff and prioritizing workload.
• Experience designing or maintaining security tooling like SIEM, SOAR, and telemetry.

Responsibilities

• Lead and supervise the cybersecurity engineering team and modernization efforts.
• Set goals, delegate tasks, monitor productivity, and ensure accountability.
• Mentor staff through technical guidance, training, and performance feedback.
• Oversee SIEM, data lake, SOAR, and threat intel tooling for SOC operations.
• Coordinate with SOC Manager and enterprise architecture on standards and modernization.
• Ensure tooling availability, reliability, performance, and security across platforms.
• Drive continuous improvement in platform resilience, automation, and integration.

Skills

Security engineering

Leadership

Change management

Mentoring staff

Communication skills

SIEM/SOAR experience

Security tooling design

Education

Bachelor’s degree or equivalent in a related field

Equivalent professional experience accepted

Tools

SIEM

SOAR

Data lake

Telemetry platforms

Job description

The State of Florida is seeking a Cybersecurity Engineering Manager to lead the Cybersecurity Engineering section and provide technical leadership and operational oversight for enterprise security tooling that supports SOC operations. This role focuses on modernizing SOC capabilities while sustaining and improving security platforms, telemetry, and data pipelines used for threat detection, analysis, threat hunting, and incident response.

Role Summary

Serve as the engineering leader for the enterprise SOC technology stack, with responsibility for strategy and execution across SIEM, data lake, SOAR, detection, and threat intelligence platforms. You will direct day-to-day engineering operations supporting SOC detection, response, and analytical activities, ensuring tooling availability, reliability, performance, and security.

Responsibilities

• Lead and supervise the Cybersecurity Engineering team, balancing operational support, project priorities, and modernization initiatives.
• Assign and prioritize workloads; monitor productivity, quality, attendance, deadlines, and professional conduct.
• Establish goals, delegate assignments, and promote accountability, collaboration, innovation, and continuous improvement.
• Mentor and develop staff through technical guidance, performance feedback, training, and professional development opportunities.
• Conduct performance evaluations and address performance or behavioral issues through appropriate corrective and progressive discipline.
• Lead and support organizational and operational change.
• Maintain and support existing security platforms while planning and executing modernization and integration efforts.
• Ensure the availability, reliability, performance, and security of enterprise security tooling and supporting infrastructure.
• Oversee security telemetry ingestion, retention, and data quality to support detection, analytics, and threat hunting.
• Identify and address gaps in tooling, telemetry, detection coverage, and platform capabilities.
• Oversee configuration, integration, maintenance, and lifecycle management of security technologies aligned with enterprise architecture and security standards.
• Lead troubleshooting, root-cause analysis, and remediation for tooling, telemetry, integration, and platform issues.
• Coordinate engineering support for incident response activities requiring specialized tooling or telemetry expertise.
• Ensure timely execution of operational, project, and engineering improvement activities.
• Partner with the SOC Manager to align engineering capabilities with analyst requirements, operational workflows, and priorities.
• Collaborate with Enterprise Architecture to ensure engineering solutions align with approved architecture standards and modernization initiatives.
• Coordinate with cybersecurity, IT, data, and other enterprise teams to support integrations, interoperability, and modernization efforts.
• Provide engineering expertise for cross-functional initiatives while coordinating priorities and dependencies with partner teams.
• Drive continuous improvement in engineering processes, platform reliability, scalability, and operational support.
• Develop and maintain engineering documentation, runbooks, procedures, and technical standards.
• Identify opportunities to improve security tooling, telemetry, detection capabilities, and analytical support.
• Support cybersecurity and SOC maturity initiatives through improved platform resilience, automation, integration, and operational effectiveness.
• Other duties as assigned.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field; equivalent professional experience may be considered in lieu of a degree.
• 6+ years of progressively responsible experience in cybersecurity engineering, security operations engineering, or related technical roles supporting enterprise security platforms.
• At least 2 years’ experience developing or following engineering processes related to change management, configuration management, or operational support.
• At least 2 years’ of experience leading, mentoring, or coordinating technical staff, including task prioritization and workload management.
• Demonstrated experience designing, implementing, configuring, or maintaining security tooling such as SIEM, SOAR, security data platforms, detection systems, or threat intelligence platforms.
• Demonstrated hands‑on experience developing, tuning, and maintaining SIEM detections in a production SOC environment.
• Experience authoring or operationalizing Sigma rules or equivalent structured detection logic.
• Demonstrated experience selecting, filtering, or optimizing security telemetry to support detection and investigation outcomes.
• Experience collaborating with cross-functional teams to support incident response, platform integration, or modernization initiatives.
• Strong written and verbal communication skills to provide technical guidance to internal teams and enterprise stakeholders.
• Relevant professional certifications such as CISSP, CCSP, cloud security certifications, or equivalent, preferred.

Technologies

• SIEM
• data lake
• SOAR
• Sigma rules

Additional Job-Related Requirements

• Criminal background investigation including fingerprinting and statewide and national criminal history records check per Section 110.1127 Florida Statutes, Chapter 435 Florida Statutes, and the Federal Bureau of Investigation’s CJIS Security Policy CJISD-ITS-DOC-08140-4.5
• Ability to sit for extended periods of time.
• Ability to stand for extended periods of time.
• Ability to drive and/or fly long distances.
• Ability to lift, push and pull up to 30 lbs.

Location and Compensation

• Location: Tallahassee, FL (onsite)
• Salary: USD 100,000 - 125,000 per year
• Worksite ZIP: 32399

Special Notes

• DMS is committed to successfully recruiting and onboarding talented and skilled individuals into its workforce.
• Veterans and individuals with disabilities are encouraged to contact the recruiter for guidance and answers through [e-mail] and [e-mail].
• An individual with a disability is qualified if they satisfy the skills, experience, and other job requirements and can perform essential functions with or without reasonable accommodation.
• Candidates requiring a reasonable accommodation (as defined by the Americans with Disabilities Act) must contact the DMS Human Resources (HR) Office at [phone] in advance to allow sufficient time to provide the accommodation.
• The State of Florida supports a Drug-Free workplace; employees are subject to reasonable suspicion drug testing per Section 112.0455, F.S.