Cybersecurity Operations Lead - Hands-On & Strategic

City of San José; San Jose (CA); Hybrid; USD 163,000 - 199,000; Full time

Job summary

City of San José is seeking a Cybersecurity Operations Manager to lead a hands‑on security team, overseeing threat detection, incident response, and security engineering to safeguard city systems. You will collaborate across infrastructure, network, cloud, and application teams to continuously improve defenses and response capabilities.

The role requires expert knowledge in enterprise security, with emphasis on network, endpoint, identity, and cloud security, plus experience guiding complex

Qualifications

• Bachelor’s Degree in a relevant field; master’s substitution allowed.
• Extensive experience in cybersecurity operations, threat detection, and incident response.
• Strong leadership and cross‑functional collaboration skills.

Responsibilities

• Lead hands‑on cybersecurity operations and protect organizational assets.
• Coordinate with infrastructure, network, cloud, and application teams to reduce risk.
• Develop and refine incident response playbooks and detection logic.
• Oversee threat hunting and investigation activities and communicate results to leadership.
• Manage a small team and provide technical guidance during high‑pressure incidents.

Skills

Network security

Endpoint security

Identity security

Cloud security

Security monitoring

Incident response

Threat intelligence

Security architecture

Threat hunting

Education

Bachelor's Degree in a relevant field

Master’s Degree substitution acceptable

Tools

SIEM

EDR/XDR

Zero Trust

Firewalls

MFA

Job description

City of San José is seeking a Cybersecurity Operations Manager to lead a hands‑on security team, overseeing threat detection, incident response, and security engineering to safeguard city systems. You will collaborate across infrastructure, network, cloud, and application teams to continuously improve defenses and response capabilities.

The role requires expert knowledge in enterprise security, with emphasis on network, endpoint, identity, and cloud security, plus experience guiding complex