Manager of Security Operations

Polsinelli; Washington (District of Columbia); On-site; USD 140,000 - 185,000; Full time

Benefits offered by this job

Paid time off

Sick time off

Referral program

Medical insurance and benefits

Dental insurance

Vision insurance

Life insurance

AD&D insurance

ID Theft insurance

Long-term disability benefits

Short-term disability benefits

Parking/Transit reimbursement

401(k) benefits

Employee assistance benefits

Job summary

Polsinelli PC is seeking a Manager of Security Operations to lead day-to-day cybersecurity operations, incident response, and risk-based security management across enterprise systems. The role requires strong leadership, technical expertise, and collaboration with cross-functional teams to protect information assets and data.

The successful candidate will direct security monitoring, threat detection, and vulnerability management, acting as incident commander during significant events and

Qualifications

• Bachelor's degree or equivalent professional experience in cybersecurity or IT.
• Minimum 5 years in cybersecurity or information security with hands-on security operations.
• Experience managing significant cybersecurity incidents and coordinating cross-functional response.
• Working knowledge of enterprise security architectures, endpoint, identity, network, cloud security, and monitoring technologies.
• Experience developing security procedures, incident response playbooks, and management reporting.

Responsibilities

• Lead day-to-day cybersecurity operations and incident response.
• Oversee threat detection, DLP, vulnerability management, and secure enterprise apps.
• Serve as primary incident commander during major cybersecurity incidents.
• Coordinate cross-functional resources to minimize business disruption and risk.
• Develop operational metrics, procedures, and incident response playbooks.

Skills

Incident response

Security operations

Vulnerability management

Threat detection

Data loss prevention

Email security

Enterprise security architectures

Security monitoring

Cross-functional coordination

Education

Bachelor's degree in Cybersecurity/Information Security/CS/IT or related field

Tools

SIEM

EDR/XDR

DLP

Vulnerability scanning

Email security

ITSM platforms

Microsoft 365

Azure

Job description

At Polsinelli, What a Law Firm Should Be is not just our tagline, it is what we live every day. We strive to create an environment where our team members are encouraged to bring their creativity and professional passions into the workplace so that they can thrive. Are you a people-person who has a keen eye for detail, thrives in a professional environment and wants to be part of a dynamic team? We have the perfect role for an engaging professional like you!

Polsinelli is hiring a Manager of Security Operations for any of our offices.

POSITION SUMMARY

The Manager of Security Operations is responsible for leading and managing the organization's day-to-day cybersecurity operations, including threat detection, incident response, data loss prevention, vulnerability management, email, and securing enterprise applications.

This position provides operational leadership for the organization's security monitoring, investigation, and response capabilities while ensuring security threats and vulnerabilities are identified, assessed, prioritized, and remediated in a timely manner.

The Manager of Security Operations serves as the primary incident commander during significant cybersecurity incidents, coordinating technical response activities & cross-functional resources to minimize business disruption and organizational risk.

The successful candidate will combine strong technical cybersecurity expertise, operational discipline, leadership capabilities, and a risk-based approach to protecting the organization's information assets, technology infrastructure, and sensitive data.

EDUCATION AND EXPERIENCE

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field, or equivalent professional experience.
• Minimum of 5 years of progressive experience in cybersecurity or information security, including substantial hands-on experience in security operations, incident response, and vulnerability management.
• Demonstrated experience managing significant cybersecurity incidents and coordinating cross-functional incident response activities.
• Working knowledge of enterprise security architectures, endpoint protection, identity security, network security, cloud security, and security monitoring technologies.
• Experience developing security procedures, incident response playbooks, operational metrics, and management reporting.

TECHNICAL KNOWLEDGE AND SKILLS

• Strong understanding of incident response methodologies, digital forensics principles, and cybersecurity investigation techniques.
• Experience with SIEM, EDR/XDR, DLP, vulnerability scanning, email security, and ITSM platforms.
• Familiarity with security technologies.
• Knowledge of common attack techniques, ransomware operations, phishing, credential compromise, lateral movement, and data exfiltration.
• Understanding of vulnerability scoring and prioritization methodologies, including CVSS, CISA Known Exploited Vulnerabilities (KEV), and exploit intelligence.
• Familiarity with MITRE ATT&CK, NIST SP 800-61, NIST Cybersecurity Framework, and CIS Controls.
• Strong analytical, investigative, troubleshooting, and problem-solving skills.

PREFERRED QUALIFICATIONS

• Experience managing security operations within a professional services, legal, financial services, healthcare, or other highly regulated environment.
• Experience working with managed security service providers, MDR partners, incident response retainers, and external penetration testing firms.
• Experience developing or maturing a Security Operations Center (SOC) or security operations program.
• Familiarity with Microsoft 365, Azure, hybrid infrastructure, and cloud security monitoring.
• Experience integrating security operations processes with enterprise risk management and business continuity programs.
• Experience implementing security automation and orchestration capabilities, including SOAR platforms.
• Experience managing operational budgets, security vendors, and security technology roadmaps.

PREFERRED CERTIFICATIONS

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• GIAC Certified Incident Handler (GCIH)
• CompTIA CySA+ or equivalent technical certification

CORE COMPETENCIES

Operational Leadership: Ability to manage competing security priorities, allocate resources, establish accountability, and maintain operational effectiveness.

Incident Command: Ability to lead high-pressure cybersecurity incidents, make timely risk-based decisions, and coordinate multiple technical and business stakeholders.

Technical Expertise: Strong understanding of modern cybersecurity threats, defensive technologies, investigation methodologies, and remediation practices.

Risk-Based Decision Making: Ability to prioritize security activities based on threat exposure, business impact, and organizational risk tolerance.

Communication: Ability to deliver clear, concise, and actionable information to technical teams, business stakeholders, and executive leadership.

Process Improvement: Demonstrated ability to establish repeatable operational processes, improve security capabilities, and measure program effectiveness.

Collaboration: Ability to work effectively with technical teams, business units, leadership, and external service providers.

WORKING CONDITIONS AND EXPECTATIONS

• Must be available to provide leadership and incident command support during significant cybersecurity incidents, including outside normal business hours when necessary.
• Must exercise sound judgment and maintain strict confidentiality when handling sensitive organizational information, security investigations, and incident-related evidence.
• Must maintain current knowledge of emerging threats, evolving cybersecurity technologies, and industry best practices.

POSITION SUCCESS CRITERIA

Success in this position will be demonstrated by the ability to maintain effective security operations, improve the organization's ability to detect and respond to cybersecurity threats, reduce exposure to known vulnerabilities, prevent unauthorized disclosure of sensitive information, and establish measurable improvements in security readiness and operational maturity.

The Manager of Security Operations is expected to provide both tactical oversight and strategic operational leadership, ensuring that security activities are executed consistently, risks are communicated appropriately, and cybersecurity incidents are managed with discipline, urgency, and accountability.

The budgeted salary range for this position is $140,000 - $185,000.

As part of full-time employment associated with this position, Polsinelli PC offers the following benefits: Paid time off, sick time off, a referral program, medical insurance and benefits, dental insurance, vision insurance, life insurance, AD&D insurance, ID Theft insurance, long-term disability benefits, short-term disability benefits, Parking/Transit reimbursement (varies depending on location), 401(k) benefits, and employee assistance benefits.

Polsinelli PC is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law.

Qualifications

Behaviors

Preferred

Team Player : Works well as a member of a group

Loyal : Shows firm and constant support to a cause

Detail Oriented : Capable of carrying out a given task with all details necessary to get the task done well

Dedicated : Devoted to a task or purpose with loyalty or integrity

Motivations

Preferred

Self-Starter : Inspired to perform without outside help

Flexibility : Inspired to perform well when granted the ability to set your own schedule and goals

Ability to Make an Impact : Inspired to perform well by the ability to contribute to the success of a project or the organization

Education

Preferred

Bachelor's or better in Information Technology or related field.

Experience

Required

5 years: Progress experience in cybersecurity or information security, including substantial hands-on experience in security operations, incident response, and vulnerability management.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.