Manager, Cybersecurity Services

TenHats; Knoxville (TN); On-site; USD 140,000 - 190,000; Full time

Job summary

TenHats is seeking a senior cybersecurity leader to manage day-to-day security operations and a dedicated team in Knoxville, TN. You will serve as the senior escalation point for alerts, incidents, and client risk concerns while guiding managed services across EDR, identity security, vulnerability management, SIEM, and more.

You will provide advisory services, develop risk-based roadmaps, and translate complex security concepts into clear business language for executive stakeholders.

Qualifications

• 7+ years of cybersecurity, security engineering, security operations, compliance, or IT risk experience.
• Experience leading cybersecurity operations, managed security services, or consulting.
• Strong knowledge of endpoint, identity, vulnerability, SIEM/logging, email, DNS, incident response, and cloud security.
• Experience with Microsoft 365 security, Entra ID, MFA, conditional access, Defender, and Azure concepts.
• Ability to build policies, remediation plans, security reports, and executive summaries.

Responsibilities

• Lead day-to-day cybersecurity service operations and assigned team members.
• Senior escalation point for alerts, incidents, vulnerabilities, and client risk concerns.
• Oversee managed cybersecurity services including EDR, identity security, vulnerability mgmt, SIEM, email security, DNS filtering, awareness, and related offerings.
• Provide cybersecurity consulting and advisory services, including risk reviews and roadmap development.
• Translate security issues into clear business language for clients.
• Ensure recommendations are technically accurate and aligned with services capabilities.
• Review service performance, alert quality, remediation trends, and client risk patterns.
• Coordinate vulnerability management, alert review, incident support, remediation tracking, and reporting.
• Design and maintain cybersecurity standards, baselines, playbooks, and procedures.
• Collaborate with advisors, Sales, and technical teams to scope follow-up projects.
• Evaluate tools, vendors, integrations, and platforms for fit and value.
• Maintain security policies, control documentation, and evidence for audits.

Skills

Cybersecurity leadership

Security operations

Threat detection

Incident response

Cloud security

Microsoft 365 security

Policy development

Education

Bachelor's degree in cybersecurity/IT or related field

Job description

Key Responsibilities

• Lead day-to-day cybersecurity service operations and assigned team members.
• Serve as the senior escalation point for cybersecurity alerts, incidents, vulnerabilities, security tool issues, and client risk concerns.
• Oversee managed cybersecurity services, including endpoint detection and response, identity security, vulnerability management, SIEM/logging, email security, DNS filtering, security awareness, and related offerings.
• Provide cybersecurity consulting and advisory services to clients, including risk reviews, security posture assessments, remediation planning, roadmap development, and executive-level recommendations.
• Help clients understand cybersecurity risks, control gaps, service options, and practical next steps in clear business language.
• Ensure client-facing cybersecurity recommendations are technically accurate, operationally supportable, and aligned with the organization’s managed services capabilities.
• Review cybersecurity service performance, recurring issues, alert quality, remediation trends, and client risk patterns.
• Coordinate vulnerability management, alert review, incident response support, remediation tracking, and security reporting.
• Design and maintain cybersecurity standards, secure baseline configurations, hardening guidance, playbooks, escalation paths, and operating procedures.
• Partner with Strategic Technology Advisors, Sales, and technical teams to identify cybersecurity risks, recommend appropriate services, and scope follow-up projects or remediation work.
• Evaluate cybersecurity tools, vendor services, integrations, and platforms for technical fit, operational efficiency, supportability, and client value.
• Maintain security policies, procedures, control documentation, access review processes, and evidence needed to support internal and client-facing security requirements.
• Coach and develop existing cybersecurity and compliance staff while helping define future team needs.

Required Qualifications

• 7+ years of cybersecurity, security engineering, security operations, compliance, or IT risk experience.
• Demonstrated experience leading cybersecurity operations, managed security services, technical delivery, consulting, or service-oriented security functions.
• Strong working knowledge of endpoint security, identity security, vulnerability management, SIEM/logging, email security, DNS filtering, incident response, and cloud security.
• Experience with Microsoft 365 security, Microsoft Entra ID, MFA, conditional access, Microsoft Defender, Azure security concepts, and identity controls.
• Ability to create operational structure, define ownership, manage follow-through, and improve service consistency.
• Ability to build and maintain policies, procedures, control mappings, remediation plans, security reports, executive summaries, and client-facing deliverables.
• Ability to translate technical and security issues into clear business language.
• Strong written and verbal communication skills, including client-facing presentation ability.
• Strong critical thinking, intellectual curiosity, attention to detail, and sound judgment.
• Ability to challenge weak assumptions, ask thoughtful questions, follow evidence, and make practical recommendations.
• Ability to work cross-functionally with technical, operational, advisory, sales, vendor, and executive teams.
• Comfortable operating in a hands-on leadership role.

Preferred Qualifications

• CISSP, CISM, CISA, Security+, GIAC, Microsoft security certifications, or equivalent experience.
• Experience in managed services, professional services, consulting, defense contractor, financial services, or other regulated environments.
• Experience with building security programs, vulnerability management platforms, SIEM platforms, DNS security, phishing simulation tools, and documentation platforms.
• Experience supporting compliance-aligned security programs such as SOC 2, HIPAA, NIST CSF, CIS Controls, CMMC, NIST SP 800-171, or similar frameworks.
• Experience with vulnerability remediation tracking, access reviews, evidence collection, risk registers, incident documentation, and security reporting.
• Experience improving or scaling a managed security service, security operations function, or client-facing cybersecurity program.

What Success Looks Like

The successful candidate will strengthen cybersecurity operations, improve managed security service consistency, create clear ownership, improve evidence quality, reduce recurring security issues, and help deliver client-facing cybersecurity services that are technically sound, operationally supportable, and aligned with real risk reduction.

They will bring operational discipline without unnecessary bureaucracy. They will notice details others miss, ask better questions, challenge assumptions, follow evidence, and help the organization make better cybersecurity decisions.