Hybrid Cybersecurity Operations Leader – Enterprise Security

San Jose CA; San Jose (CA); Hybrid; USD 163,000 - 199,000; Full time

Job summary

The City of San José's Information Technology Department seeks a Cybersecurity Operations Manager to lead a small team responsible for cyber threat intelligence, incident response, security engineering, and defensive security architecture.

The role combines hands‑on technical work with strategic leadership, guiding investigations, defining playbooks, and coordinating with infrastructure, network, cloud, and application teams to reduce enterprise risk.

Qualifications

• Bachelor’s degree in a relevant field and five years of progressively responsible cybersecurity experience.
• Experience leading cybersecurity teams and coordinating with multiple tech domains.
• Strong understanding of NIST CSF, CIS Controls, MITRE ATT&CK, and ISO 27001.

Responsibilities

• Lead cyber threat intelligence collection, analysis, and operational use.
• Oversee incident response from triage to post‑incident improvement.
• Define and maintain security controls, playbooks, and escalation procedures.
• Coordinate with infrastructure, network, endpoint, cloud, and application teams to reduce enterprise risk.
• Provide hands‑on technical leadership during high‑pressure incidents and investigations.
• Lead risk reviews of complex technology implementations and vendor solutions.

Skills

Cybersecurity leadership

Threat intelligence

Incident response

Security architecture

Threat hunting

Security operations

Risk management

Cross-functional collaboration

Education

Bachelor’s Degree in a relevant field

Master’s Degree substitution for experience

Tools

SIEM/EDR/XDR

Cloud security tools

Identity & access controls

Job description

The City of San José's Information Technology Department seeks a Cybersecurity Operations Manager to lead a small team responsible for cyber threat intelligence, incident response, security engineering, and defensive security architecture.

The role combines hands‑on technical work with strategic leadership, guiding investigations, defining playbooks, and coordinating with infrastructure, network, cloud, and application teams to reduce enterprise risk.