Cybersecurity Operations Manager

Ethereum Technologies LLC; Charlotte (NC); Presencial; USD 89 000 - 126 000; Tempo integral

Resumo da oferta

ICW Group is seeking an experienced Cybersecurity Operations Manager for a 12-month on-site engagement in Charlotte, NC. You will oversee CrowdStrike services, lead incident response coordination, and drive operational governance across multiple teams, ensuring risk reduction and timely remediation.

The role requires a strong background in SOC operations, governance, and executive reporting, with extensive experience in customer-facing security program delivery.

Qualificações

• 12+ years in cybersecurity including security operations, incident response, threat detection, exposure management, or managed security services.
• 7+ years leading enterprise SOC, MDR, incident-response, or managed-security programs.
• 4+ years with CrowdStrike Falcon technologies (Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian/AIDR).
• Senior client-facing experience (TAM, SOC Manager, Service Delivery Manager) with cross-functional coordination.
• Proven ability to translate technical issues into business impact and actions.

Responsabilidades

• Act as primary operational liaison for Falcon Complete service matters.
• Coordinate critical-incident communications, follow-up actions, and closure.
• Ensure recommendations are tracked and resolved by ICW or Atos teams.
• Lead implementation workstreams and manage risks with Atos as the GSI.
• Maintain RAID log and executive dashboards; lead weekly/monthly service reviews.

Conhecimentos

Security operations

Incident response

Threat detection

Governance

Client-facing

Formação académica

CISSP

CISM

CCSP

GCIH

GCED

CompTIA Security+

Ferramentas

CrowdStrike Falcon Complete

Falcon Insight

Identity Protection

Exposure Management

Next-Gen SIEM

Jira

Descrição da oferta de emprego

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Job Title: Cybersecurity Operations ManagerLocation: Charlotte, NC
Duration: 12 Months + Extension
Bill Rate: $78/hour
Job Type: W-2, 1099, C2C
Client: To Be Discussed Later
Work Authorization: US-Citizen, H-1B, OPT-EAD, GC-EAD

JobDescription:

We are seeking an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) to serve as the onsite liaison among ICW Group, CrowdStrike, and Atos. This 12-month role will lead operational oversight of CrowdStrike services, including implementation, adoption, governance, and daily coordination.

The resource will coordinate implementation through steady-state support, serving as the central contact for Falcon Complete, CTEM, Falcon Guardian / AIDR, service reviews, and escalations.

Key Responsibilities :

• Act as the primary operational liaison for Falcon Complete service matters.
• Coordinate critical-incident communications, follow-up actions, and closure.
• Ensure recommendations are assigned, tracked, and resolved by the appropriate ICW or Atos team.
• Coordinate implementation workstreams, dependencies, risks, and delivery with Atos as the GSI.
• Maintain accountability through documented owners, due dates, actions, and escalations.
• Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams.
• Lead day-to-day administration and operating processes for CTEM and Falcon Guardian / AIDR.
• Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement.
• Integrate findings into ICW workflows and partner with asset owners to reduce risk.
• Lead weekly operational and monthly service reviews.
• Maintain a RAID log covering risks, assumptions, issues, and dependencies.
• Create executive dashboards and concise status reporting.
• Maintain the roadmap, RACI, escalation model, and transition plan.
• Implementation oversight, deployment coordination, and operational transition plan.
• Security-operations governance framework, cadence, RACI, and escalation model.
• Executive dashboards, monthly service reviews, and action tracking.
• Incident-escalation and stakeholder-communication process.
• CTEM remediation tracking and Falcon Guardian / AIDR operating procedures.
• RAID log and remediation-status reporting.
• Knowledge-transfer and operational-readiness documentation.

Required Experience and Qualifications :

• 12+ years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services.
• 7+ years leading enterprise SOC, MDR, incident-response, or managed-security programs.
• 4+ years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian / AIDR.
• Experience in a senior client-facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager.
• Proven coordination across customers, cybersecurity vendors, and global systems integrators during implementation and operations.
• Experience with critical escalations, governance, executive reporting, service reviews, and cross-functional remediation.
• Ability to work onsite in San Diego for the 12-month assignment.
• Strong communication skills and the ability to translate technical issues into business impact and clear actions.

Preferred Technical Experience :

• CrowdStrike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Guardian / AIDR, Falcon Next-Gen SIEM, and Falcon OverWatch.
• Security incident response, threat hunting, detection engineering, vulnerability and exposure management, and SOC operations.
• ServiceNow and Jira workflows; Microsoft Intune, SCCM, BigFix, or comparable endpoint-deployment tools.
• Identity platforms such as Microsoft Entra ID, Active Directory, and Okta.
• Cloud environments including Microsoft Azure, Amazon Web Services, or Google Cloud.
• Working knowledge of NIST Cybersecurity Framework, MITRE ATT&CK, CIS Controls, ISO/IEC 27001, and ITIL practices.

Cybersecurity Certifications :

• CISSP - Certified Information Systems Security Professional.
• CISM - Certified Information Security Manager.
• CCSP - Certified Cloud Security Professional.
• GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), or comparable GIAC certification.
• CompTIA Security+ for candidates whose broader experience demonstrates senior-level capability.

CrowdStrike Certifications:

• Other current CrowdStrike credentials relevant to Falcon Complete, identity, exposure management, or Next-Gen SIEM.

Program and Service Management Cerfications:

• PMP - Project Management Professional.
• ITIL 4 Foundation or advanced ITIL certification.
• Microsoft Certified: Security Operations Analyst Associate or Cybersecurity Architect Expert.

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.