Cybersecurity Operations Manager

MethodHub; San Diego (CA); Presencial; USD 150 000 - 185 000; Tempo integral

Resumo da oferta

MethodHub seeks an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) to serve as the onsite liaison among client partners for a 12-month engagement in San Diego. You will oversee CrowdStrike services, including implementation, adoption, governance, and day-to-day coordination.

You will lead CTEM and Falcon Guardian / AIDR administration, coordinate incident response, governance, service reviews, and executive reporting, and ensure smooth knowledge transfer and

Qualificações

• 10+ years in cybersecurity operations, incident response, and related areas.
• 5+ years leading enterprise SOC, MDR, or security programs.
• 3+ years with CrowdStrike Falcon tech, preferably Falcon Complete or Guardian/AIDR.
• Senior client-facing experience (TAM, SOC Manager, Service Delivery).
• Proven cross-functional coordination with vendors and partners.

Responsabilidades

• Act as onsite liaison for CrowdStrike service management and governance.
• Coordinate incident communications, follow-up actions, and closure.
• Drive implementation, onboarding, and service reviews with clients.
• Manage CTEM operations and Falcon Guardian / AIDR administration.
• Maintain RAID logs, escalation paths, and executive status updates.
• Produce dashboards and transition plans for knowledge transfer.

Conhecimentos

Cybersecurity

Security Operations

Incident Response

Governance

Client-facing

Cross-functional

Formação académica

CISSP

CISM

CCSP

GIAC GCIH

GIAC GCED

CompTIA Security+

Ferramentas

CrowdStrike Falcon Complete

Falcon Insight

Falcon Guardian/AIDR

ServiceNow

Jira

Microsoft Entra ID

Active Directory

Okta

Azure

AWS

GCP

Next-Gen SIEM

Descrição da oferta de emprego

Cybersecurity Operations Manager / Technical Account Manager (TAM)

Duration: 12 months

Position Summary

We are seeking an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) to serve as the onsite liaison among client partners. This 12-month role will lead operational oversight of CrowdStrike services, including implementation, adoption, governance, and daily coordination.

The resource will coordinate implementation through steady-state support, serving as the central contact for Falcon Complete, CTEM, Falcon Guardian / AIDR, service reviews, and escalations.

Primary Objectives During the First Year

• Lead the successful implementation and onboarding of CrowdStrike services.
• Establish governance, operational reviews, escalation paths, and service-management processes.
• Manage CTEM operations and remediation coordination.
• Manage Falcon Guardian / AIDR administration and operating processes.
• Assist ICW in maturing security operations and incident-response processes.
• Complete knowledge transfer and operational-readiness documentation before the end of the assignment.

Key Responsibilities

CrowdStrike Service Management

• Act as the primary operational liaison for Falcon Complete service matters.
• Coordinate critical-incident communications, follow-up actions, and closure.
• Ensure recommendations are assigned, tracked, and resolved by the appropriate team.

Security Operations and GSI Coordination

• Coordinate implementation workstreams, dependencies, risks, and delivery with the client as the GSI.
• Maintain accountability through documented owners, due dates, actions, and escalations.
• Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams.

CTEM and Falcon Guardian / AIDR

• Lead day-to-day administration and operating processes for CTEM and Falcon Guardian / AIDR.
• Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement.
• Integrate findings into ICW workflows and partner with asset owners to reduce risk.

Governance, Reporting, and Transition

• Lead weekly operational and monthly service reviews.
• Maintain a RAID log covering risks, assumptions, issues, and dependencies.
• Create executive dashboards and concise status reporting.
• Maintain the roadmap, RACI, escalation model, and transition plan.

Deliverables During the Engagement

• Implementation oversight, deployment coordination, and operational transition plan.
• Security-operations governance framework, cadence, RACI, and escalation model.
• Executive dashboards, monthly service reviews, and action tracking.
• Incident-escalation and stakeholder-communication process.
• CTEM remediation tracking and Falcon Guardian / AIDR operating procedures.
• RAID log and remediation-status reporting.
• Knowledge-transfer and operational-readiness documentation.

Required Experience and Qualifications

• 10+ years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services.
• 5+ years leading enterprise SOC, MDR, incident-response, or managed-security programs.
• 3+ years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian / AIDR.
• Experience in a senior client-facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager.
• Proven coordination across customers, cybersecurity vendors, and global systems integrators during implementation and operations.
• Experience with critical escalations, governance, executive reporting, service reviews, and cross-functional remediation.
• Strong communication skills and the ability to translate technical issues into business impact and clear actions.

Preferred Technical Experience

• CrowdStrike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Guardian / AIDR, Falcon Next-Gen SIEM, and Falcon OverWatch.
• Security incident response, threat hunting, detection engineering, vulnerability and exposure management, and SOC operations.
• ServiceNow and Jira workflows; Microsoft Intune, SCCM, BigFix, or comparable endpoint-deployment tools.
• Identity platforms such as Microsoft Entra ID, Active Directory, and Okta.
• Cloud environments include Microsoft Azure, Amazon Web Services, or Google Cloud.
• Working knowledge of NIST Cybersecurity Framework, MITRE ATT&CK, CIS Controls, ISO/IEC 27001, and ITIL practices.

Cybersecurity and Leadership

• CISSP - Certified Information Systems Security Professional.
• CISM - Certified Information Security Manager.
• CCSP - Certified Cloud Security Professional.
• GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), or comparable GIAC certification.
• CompTIA Security+ for candidates whose broader experience demonstrates senior-level capability.

CrowdStrike

• CrowdStrike Certified Falcon Responder (CCFR).
• Other current CrowdStrike credentials relevant to Falcon Complete, identity, exposure management, or Next-Gen SIEM.

Program and Service Management

• ITIL 4 Foundation or advanced ITIL certification.
• Microsoft Certified: Security Operations Analyst Associate or Cybersecurity Architect Expert.