Cybersecurity Operations Supervisor

FTI; Menasha (WI); On-site; USD 90,000 - 130,000; Full time

Job summary

FTI is seeking a Cybersecurity Operations Supervisor to lead daily security operations. This role involves managing the cybersecurity team, ensuring tasks are executed efficiently and security incidents are handled promptly.

The ideal candidate will possess a background in IT and cybersecurity, with significant experience in team management and using frameworks like NIST and MITRE. The position is essential for maintaining operational integrity across security environments.

Qualifications

• 5-7 years in IT, with 3-5 years in cybersecurity.
• Experience in a lead or mentoring role.
• Strong understanding of security tools and frameworks.

Responsibilities

• Oversee the cybersecurity team's daily workflow and manage security incidents.
• Drive implementation of security tools and automate operations.
• Mentor team members and improve their technical skills.

Skills

Cybersecurity frameworks (NIST CSF, CIS, MITRE ATT&CK)

Incident response

Team management

Automation and scripting

Technical troubleshooting

Education

Bachelor or Associate Degree in IT, IS, or CS

Tools

IAM

SIEM

EDR

Vulnerability Scanners

Job description

The Cybersecurity Operations Supervisor acts as the frontline tactical leader for the daily activities of the Cybersecurity team. While the Manager focuses on broader strategy and governance, this Supervisor is the "player‑coach" responsible for day‑to‑day security operations and functions, ensuring "Keep the lights on" (KTLO) tasks are executed with high quality and efficiency.

Minimum Requirements

• Education: Bachelor Degree or Associate Degree in Information Technology, Information Systems, Computer Science, or equivalent.
• Experience: 5-7 years in IT, including 3-5 years in cybersecurity, 2+ years applying frameworks (NIST CSF, CIS, MITRE ATT&CK), and experience in a lead or mentoring role.
• Travel: 5-10%.
• Work Schedule: This position works between the hours of 7 AM and 5 PM, Monday‑Friday. However, work may be performed at any time on any day of the week to meet business needs.

Key Responsibilities

• Oversee the day‑to‑day workflow of the cybersecurity team, managing the queue of security alerts, operational tickets, and routine maintenance tasks.
• Ensures consistent monitoring, triage, and resolution of security events across all environments.
• Manages team schedules, on‑call rotations, and shift hand‑offs to ensure uninterrupted operational coverage.
• Serves as an escalation point for complex technical issues, unblocking team members during daily operations.
• Drives implementation and/or the continuous tuning, optimization, and maturity of security tools (e.g. IAM, IGA, PAM, SIEM, EDR, IDS/IPS, Email Gateways, Vulnerability Scanners, etc.).
• Identifies opportunities to automate repetitive operational tasks (SOAR implementation, scripting) to free up analyst time.
• Validates that all security tools are healthy, fully deployed, and effectively communicating with logging and monitoring systems.
• Directs tactical incident response efforts; leads the team through preparation, detection & analysis, containment, eradication, recovery, and post‑incident activity.
• Executes the tactical components of the Cybersecurity Strategy and Roadmap, breaking down high‑level goals into actionable, day‑to‑day projects for the team.
• Continually identifies, evaluates, and remediates active vulnerabilities and threats that could affect operational and business activities.
• Carries out supervisory responsibilities including interviewing, hiring, training, assigning work, appraising performance, and resolving team problems.
• Mentors team members, elevating their technical skill sets through guidance, cross‑training, and professional development plans.
• Creates and maintains documentation for daily operations, including standard operating procedures (SOPs) and incident response playbooks.
• Provides operational metrics and reporting (e.g., mean time to detect/respond, alert volumes, tool health) to the Cybersecurity Manager.
• Acts as a trusted operational advisor to Service Desk support, networking, and infrastructure teams to ensure secure BT operations. Also serves as business liaison to departments and lines of business on topics related to Cybersecurity.
• Stays current on the latest threat landscapes, tools, and methodologies to ensure the team's operational tactics remain highly effective.
• Researches, attends conferences and vendor learning events, and trains to continually improve skill and knowledge of tools, trends, technologies, strategies, and methodologies in security related domains.
• Performs other related duties as required and assigned.

Faith Technologies, Inc. is an Equal Opportunity Employer – veterans/disabled.