Manager-Cybersecurity

BAL; Richardson (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Berry Appleman & Leiden (BAL) is seeking a hands-on Manager for our Cybersecurity team in Richardson, TX. You will lead cybersecurity engineers and analysts, directing incident response, threat detection, and forensics efforts while remaining technically engaged in major investigations and strategic security initiatives.

The role emphasizes improving detection capabilities, implementing new security technologies, and strengthening response readiness in a grow ing immigration services environment.

Qualifications

• Bachelor's degree or equivalent experience.
• 3-5 years leading cybersecurity teams.
• Demonstrated experience with Incident Response, DFIR, Threat Hunting, Security Operations, Security Engineering, Security Program Development.
• Related certification(s) preferred.

Responsibilities

• Lead a team of cybersecurity engineers, analysts, and incident responders.
• Oversee security monitoring and incident response activities; triage, investigate, escalate, and remediate events.
• Direct DFIR investigations involving endpoints, cloud resources, identities, and networks.
• Drive security technology evaluations and implement improvements (XDR, SIEM, SOAR, etc.).
• Support audits, risk assessments, and governance with reporting to leadership.

Skills

Incident Response

DFIR

Threat Hunting

Security Operations

Security Engineering

Security Program Development

Leadership

Education

Bachelor's degree or equivalent experience

Tools

XDR

SIEM

SOAR

Vulnerability Management

Identity Security

Cloud Security

Job description

Who we are:

BAL is a team of brilliant people who change lives through elite immigration work and collaborative innovation. We pursue the exceptional in all that we do, but never at the expense of our values. There’s no denying our work is demanding, both in volume and pace, but we’re up for the challenge. We love the balance of hard work and fun – so, you’ll see us in jeans as we shatter glass ceilings and conventional stereotypes. BAL employees feel valued, rewarded, and respected. We seek opportunities to be of service to others and our communities. We are committed to your growth and development, and want to set you up for success here at BAL and beyond.

Who you are:

You are looking for work that has a purpose. You aren’t afraid to roll up your sleeves and get stuff done. You learn quickly. You move fast. You embrace challenge and detail as well as creative thinking. You believe you have something unique to contribute and you aren’t afraid to raise your hand. You understand that powering human achievement is ultimately about impacting a real person. You are looking for a place to grow and an environment where everyone has a spot and is genuinely welcome.

We’re better together:

A bright, driven person like you and an industry-leading powerhouse like BAL? It's a perfect combination! We truly want to see you succeed here and become an integral part of our mission to provide an experience that makes a positive difference in people’s lives. Come be a part of something special, where you can have an impact and be valued just for being you!

In addition to competitive pay, a discretionary annual bonus, and a supportive, team oriented culture, we offer an outstanding benefits package that includes medical, dental, vision, disability, and life insurance, sick time, unlimited vacation, and 401(k) with company match.

Position Summary

We are seeking a hands-on Manager for our Cybersecurity team. You’ll lead the organization's cybersecurity capabilities, including incident response, threat detection, threat hunting, digital forensics, vulnerability remediation coordination, and security technology operations.

This role provides leadership for cybersecurity engineers and analysts while remaining technically engaged in major investigations, strategic security initiatives, and security architecture decisions. The manager will drive the maturity of the organization's cybersecurity operations by improving detection capabilities, implementing new security technologies, reducing operational risk, and strengthening response readiness.

This is a true player-coach role, ideal for a hands-on cybersecurity leader with strong experience across DFIR, Security Operations, threat detection, and security engineering.

Primary Responsibilities

Leadership & Team Management

• Lead a team of cybersecurity engineers, analysts, and incident responders.
• Establish team goals, KPIs, and development plans.
• Conduct performance management, coaching, mentoring, and recruiting activities.
• Manage operational priorities and incident response readiness.
• Foster a culture of accountability, continuous improvement, and operational excellence.

Security Operations

• Oversee security monitoring and incident response activities.
• Ensure timely triage, investigation, escalation, and remediation of security events.
• Establish and improve operational processes and service metrics.
• Maintain incident response plans, playbooks, and escalation procedures.

Digital Forensics & Incident Response

• Lead response efforts for high-severity cybersecurity incidents.
• Direct forensic investigations involving endpoints, cloud resources, identities, and network infrastructure.
• Coordinate cross-functional response efforts with infrastructure, legal, HR, and executive leadership.
• Deliver after-action reports and lessons learned.

Security Engineering & Program Maturity

• Lead evaluation and implementation of cybersecurity technologies.
• Drive improvements in:
  • XDR
  • SIEM
  • Threat Intelligence
  • SOAR
  • Vulnerability Management
  • Identity Security
  • Cloud Security
• Develop and execute security roadmaps aligned with organizational objectives.
• Ensure security controls support Zero Trust and defense-in-depth strategies.

Risk & Governance Support

• Support audits and compliance initiatives.
• Assist with risk assessments and remediation planning.
• Provide reporting and metrics to leadership.
• Support regulatory and cybersecurity framework requirements.

Required Qualifications

• Bachelor's degree or equivalent experience.
• 3-5 years leading cybersecurity teams.
• Demonstrated experience with:
  • Incident Response
  • DFIR
  • Threat Hunting
  • Security Operations
  • Security Engineering
  • Security Program Development
• Related certification(s) preferred

Note:

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed are representative of the knowledge, skill, and/or ability required and are not intended to be an exhaustive list of all duties, responsibilities or qualifications associated with this job.

Berry Appleman & Leiden is an Equal Opportunity Employer. It is the policy of BAL to ensure an equal employment opportunity without discrimination or harassment on the basis of race, color, national origin, religion, gender, gender identity or expression, age, disability, alienage or citizenship status, marital status, creed, genetic predisposition or carrier status, sexual orientation or any other characteristic protected by law. BAL prohibits and will not tolerate any such discrimination or harassment.

BAL does not accept unsolicited resumes from recruiters or employment agencies. BAL is under no obligation to pay any referral compensation or recruiter fee in the absence of a current executed Recruitment Services Agreement. In the event a recruiter or agency submits an unsolicited resume or candidate without an agreement, BAL reserves the right to pursue and hire said candidate(s) without any financial obligation to the recruiter or agency. Any unsolicited resumes, including those submitted to hiring managers, shall be deemed the property of BAL. If your agency would like to be considered as a potential recruiting partner, please forward your contact information to [e-mail].