Cybersecurity Operations Manager

Valiant Technologies LLC; Charlotte (NC); On-site; USD 89,000 - 126,000; Full time

Job summary

Valiant Technologies LLC in Charlotte, NC seeks an experienced Cybersecurity Operations Manager to lead operational oversight of CrowdStrike services and serve as the onsite liaison among ICW Group, CrowdStrike, and Atos. This 12-month assignment will drive implementation, adoption, governance, and steady-state coordination.

The role requires 12+ years in cybersecurity, 7+ years in enterprise SOC leadership, and 4+ years with CrowdStrike Falcon technologies.

Qualifications

• Twelve+ years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services.
• Seven+ years leading enterprise SOC, MDR, incident-response, or managed-security programs.
• Four+ years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian / AIDR.
• Experience in a senior client-facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager.
• Proven coordination across customers, cybersecurity vendors, and global systems integrators during implementation and operations.

Responsibilities

• Act as the primary operational liaison for Falcon Complete service matters.
• Coordinate critical-incident communications, follow-up actions, and closure.
• Ensure recommendations are assigned, tracked, and resolved by the appropriate ICW or Atos team.
• Coordinate implementation workstreams, dependencies, risks, and delivery with Atos as the GSI.
• Maintain accountability through documented owners, due dates, actions, and escalations.
• Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams.
• Lead day-to-day administration and operating processes for CTEM and Falcon Guardian / AIDR.
• Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement.
• Integrate findings into ICW workflows and partner with asset owners to reduce risk.
• Lead weekly operational and monthly service reviews.
• Maintain a RAID log covering risks, assumptions, issues, and dependencies.
• Create executive dashboards and concise status reporting.

Skills

Cybersecurity expertise

Security operations

Incident response

Client-facing leadership

Cross-functional collaboration

Education

CISSP

CISM

CCSP

GCIH/GCED

CompTIA Security+

Tools

CrowdStrike Falcon

ServiceNow

Jira

Microsoft Intune

Okta

Azure

Job description

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Job Title: Cybersecurity Operations ManagerLocation: Charlotte, NC
Duration: 12 Months + Extension
Bill Rate: $78/hour
Job Type: W-2, 1099, C2C
Client: To Be Discussed Later
Work Authorization: US-Citizen, H-1B, OPT-EAD, GC-EAD

JobDescription:

We are seeking an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) to serve as the onsite liaison among ICW Group, CrowdStrike, and Atos. This 12-month role will lead operational oversight of CrowdStrike services, including implementation, adoption, governance, and daily coordination.

The resource will coordinate implementation through steady-state support, serving as the central contact for Falcon Complete, CTEM, Falcon Guardian / AIDR, service reviews, and escalations.

Key Responsibilities :

• Act as the primary operational liaison for Falcon Complete service matters.
• Coordinate critical-incident communications, follow-up actions, and closure.
• Ensure recommendations are assigned, tracked, and resolved by the appropriate ICW or Atos team.
• Coordinate implementation workstreams, dependencies, risks, and delivery with Atos as the GSI.
• Maintain accountability through documented owners, due dates, actions, and escalations.
• Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams.
• Lead day-to-day administration and operating processes for CTEM and Falcon Guardian / AIDR.
• Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement.
• Integrate findings into ICW workflows and partner with asset owners to reduce risk.
• Lead weekly operational and monthly service reviews.
• Maintain a RAID log covering risks, assumptions, issues, and dependencies.
• Create executive dashboards and concise status reporting.
• Maintain the roadmap, RACI, escalation model, and transition plan.
• Implementation oversight, deployment coordination, and operational transition plan.
• Security-operations governance framework, cadence, RACI, and escalation model.
• Executive dashboards, monthly service reviews, and action tracking.
• Incident-escalation and stakeholder-communication process.
• CTEM remediation tracking and Falcon Guardian / AIDR operating procedures.
• RAID log and remediation-status reporting.
• Knowledge-transfer and operational-readiness documentation.

Required Experience and Qualifications :

• 12+ years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services.
• 7+ years leading enterprise SOC, MDR, incident-response, or managed-security programs.
• 4+ years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian / AIDR.
• Experience in a senior client-facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager.
• Proven coordination across customers, cybersecurity vendors, and global systems integrators during implementation and operations.
• Experience with critical escalations, governance, executive reporting, service reviews, and cross-functional remediation.
• Ability to work onsite in San Diego for the 12-month assignment.
• Strong communication skills and the ability to translate technical issues into business impact and clear actions.

Preferred Technical Experience :

• CrowdStrike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Guardian / AIDR, Falcon Next-Gen SIEM, and Falcon OverWatch.
• Security incident response, threat hunting, detection engineering, vulnerability and exposure management, and SOC operations.
• ServiceNow and Jira workflows; Microsoft Intune, SCCM, BigFix, or comparable endpoint-deployment tools.
• Identity platforms such as Microsoft Entra ID, Active Directory, and Okta.
• Cloud environments including Microsoft Azure, Amazon Web Services, or Google Cloud.
• Working knowledge of NIST Cybersecurity Framework, MITRE ATT&CK, CIS Controls, ISO/IEC 27001, and ITIL practices.

Cybersecurity Certifications :

• CISSP - Certified Information Systems Security Professional.
• CISM - Certified Information Security Manager.
• CCSP - Certified Cloud Security Professional.
• GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), or comparable GIAC certification.
• CompTIA Security+ for candidates whose broader experience demonstrates senior-level capability.

CrowdStrike Certifications:

• Other current CrowdStrike credentials relevant to Falcon Complete, identity, exposure management, or Next-Gen SIEM.

Program and Service Management Cerfications:

• PMP - Project Management Professional.
• ITIL 4 Foundation or advanced ITIL certification.
• Microsoft Certified: Security Operations Analyst Associate or Cybersecurity Architect Expert.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.