- Job Title: Cybersecurity Operations Manager
- Location: Charlotte, NC
- Duration: 12 Months + Extension
- Bill Rate: $78/hour
- Job Type: W-2, 1099, C2C
- Client: To Be Discussed Later
- Work Authorization: US-Citizen, H-1B, OPT-EAD, GC-EAD
JobDescription:
We are seeking an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) to serve as the onsite liaison among ICW Group, CrowdStrike, and Atos. This 12-month role will lead operational oversight of CrowdStrike services, including implementation, adoption, governance, and daily coordination.
The resource will coordinate implementation through steady-state support, serving as the central contact for Falcon Complete, CTEM, Falcon Guardian / AIDR, service reviews, and escalations.
Key Responsibilities :
- Act as the primary operational liaison for Falcon Complete service matters.
- Coordinate critical‑incident communications, follow‑up actions, and closure.
- Ensure recommendations are assigned, tracked, and resolved by the appropriate ICW or Atos team.
- Coordinate implementation workstreams, dependencies, risks, and delivery with Atos as the GSI.
- Maintain accountability through documented owners, due dates, actions, and escalations.
- Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams.
- Lead day‑to‑day administration and operating processes for CTEM and Falcon Guardian / AIDR.
- Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement.
- Integrate findings into ICW workflows and partner with asset owners to reduce risk.
- Lead weekly operational and monthly service reviews.
- Maintain a RAID log covering risks, assumptions, issues, and dependencies.
- Create executive dashboards and concise status reporting.
- Maintain the roadmap, RACI, escalation model, and transition plan.
- Implementation oversight, deployment coordination, and operational transition plan.
- Security‑operations governance framework, cadence, RACI, and escalation model.
- Executive dashboards, monthly service reviews, and action tracking.
- Incident‑escalation and stakeholder‑communication process.
- CTEM remediation tracking and Falcon Guardian / AIDR operating procedures.
- RAID log and remediation‑status reporting.
- Knowledge‑transfer and operational‑readiness documentation.
Required Experience and Qualifications :
- 12+ years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services.
- 7+ years leading enterprise SOC, MDR, incident‑response, or managed‑security programs.
- 4+ years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next‑Gen SIEM, or Guardian / AIDR.
- Experience in a senior client‑facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager.
- Proven coordination across customers, cybersecurity vendors, and global systems integrators during implementation and operations.
- Experience with critical escalations, governance, executive reporting, service reviews, and cross‑functional remediation.
- Ability to work onsite in San Diego for the 12‑month assignment.
- Strong communication skills and the ability to translate technical issues into business impact and clear actions.
Preferred Technical Experience :
- CrowdStrike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Guardian / AIDR, Falcon Next‑Gen SIEM, and Falcon OverWatch.
- Security incident response, threat hunting, detection engineering, vulnerability and exposure management, and SOC operations.
- ServiceNow and Jira workflows; Microsoft Intune, SCCM, BigFix, or comparable endpoint‑deployment tools.
- Identity platforms such as Microsoft Entra ID, Active Directory, and Okta.
- Cloud environments including Microsoft Azure, Amazon Web Services, or Google Cloud.
- Working knowledge of NIST Cybersecurity Framework, MITRE ATT&CK, CIS Controls, ISO/IEC 27001, and ITIL practices.
Cybersecurity Certifications :
- CISSP - Certified Information Systems Security Professional.
- CISM - Certified Information Security Manager.
- CCSP - Certified Cloud Security Professional.
- GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), or comparable GIAC certification.
- CompTIA Security+ for candidates whose broader experience demonstrates senior‑level capability.
CrowdStrike Certifications:
- Other current CrowdStrike credentials relevant to Falcon Complete, identity, exposure management, or Next‑Gen SIEM.
Program and Service Management Cerfications:
- PMP - Project Management Professional.
- ITIL 4 Foundation or advanced ITIL certification.
- Microsoft Certified: Security Operations Analyst Associate or Cybersecurity Architect Expert.
We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.
Some of our Business Ventures - Knowledge Analytics
Do restrictive necessities, your capability for advanced analytics or your business model need custom‑made applications and infrastructure configurations? opt for our hosted managed services to urge comprehensive analytics solutions supported industry‑leading Cloud Analytics Technologies, LLC code - delivered by the Cloud Analytics Technologies, LLC consultants UN agency understand these solutions best. Through a mix of with‑it technology and dedicated service and support, Cloud Analytics Technologies, LLC hosted managed services will facilitate you: