Cybersecurity Operations Lead

Insight Global; Lake Worth (TX); On-site; USD 120,000 - 170,000; Full time

Job summary

Insight Global is seeking a senior Lead for Cybersecurity Operations to direct day-to-day monitoring, detection, and response activities across our security program.

You will act as the primary escalation point for complex investigations and own the incident response lifecycle, coordinating with leadership and the SOC to translate strategy into actionable work.

Qualifications

• Bachelor’s degree or equivalent practical experience in a related field.
• Security+ and/or GCIA/GCED/related certifications.
• 5–8+ years in cybersecurity operations or SOC environments.
• Proven experience leading or coordinating incident response activities.
• Hands-on experience with SIEM platforms and detection-driven operations.
• Strong familiarity with EDR, NDR, email security, WAF, and monitoring tools.

Responsibilities

• Lead Cybersecurity Operations Execution & Quality.
• Oversee day-to-day security monitoring, detection, and response activities with high-quality investigations and timely remediation.
• Serve as Primary Technical Escalation Point for analysts and complex investigations.
• Own Incident Response Lifecycle & Stakeholder Coordination with leadership and SOC.
• Drive Detection & Response Maturity (SIEM & Tooling) with use-case development.
• Coordinate SME Programs & Operational Initiatives and track progress.
• Develop & Optimize Playbooks, Processes, and Automation for consistency and scalability.
• Use metrics and threat insights to drive continuous improvement of security posture.

Skills

SIEM platforms

EDR

NDR

Email security

WAF

Incident response

Threat analysis

Education

Bachelor’s degree in Computer Science, IT, Cybersecurity, or related field

Job description

Job Description

Responsibilities

Lead Cybersecurity Operations Execution & Quality

Oversee day-to-day security monitoring, detection, and response activities, ensuring high-quality investigations and timely remediation of security events and incidents.

Serve as Primary Technical Escalation Point

Act as the go-to escalation resource for analysts, providing hands‑on guidance for complex investigations and ensuring consistency and depth in investigative outcomes.

Own Incident Response Lifecycle & Stakeholder Coordination

Lead and coordinate complex security incidents end‑to‑end, while acting as a liaison between leadership and the SOC—translating strategic direction into actionable tasks and delivering clear, meaningful updates.

Drive Detection & Response Maturity (SIEM & Tooling)

Lead SIEM‑driven operations and continuously improve detection capabilities through use‑case development, tuning, telemetry optimization, and enhanced coverage across security domains.

Coordinate SME Programs & Operational Initiatives

Break down strategic cybersecurity objectives into actionable workstreams, track progress, remove blockers, and ensure successful execution of team initiatives.

Develop & Optimize Playbooks, Processes, and Automation

Create and refine incident response playbooks, SOPs, and automation opportunities to improve consistency, efficiency, and scalability of operations.

Leverage Metrics & Threat Insights to Drive Improvement

Track key operational metrics (MTTD, MTTR, alert fidelity) and conduct advanced threat analysis to inform decisions, strengthen defenses, and continuously improve security posture.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent practical experience).

Security+, GCIH, GCIA, GCED, or equivalent certifications.

5–8+ years of experience in cybersecurity operations or SOC environments

Proven experience leading or coordinating incident response activities

Hands‑on experience with SIEM platforms and building detection‑driven operations

Strong familiarity with security technologies such as EDR, NDR, email security, WAF, and identity/security monitoring tools