Remote CSOC Leader: Security Ops & Incident Response

The Sherwin-Williams Company; Cleveland (OH); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Remote work

Travel up to 10%

Job summary

The Sherwin-Williams Company is seeking a Cybersecurity Security Operations Center (CSOC) Manager to lead a team of security engineers and analysts. The role focuses on monitoring, alerting, and improving threat posture while coordinating incident response and strategic governance.

The ideal candidate has extensive IT security leadership experience, strong analytics, and the ability to drive cross-functional initiatives across vendors and internal teams.

Qualifications

• Bachelor's degree in related field or equivalent experience.
• 12+ years IT and/or cyber experience.
• 8+ years IT security experience.
• 8+ years of managing a team of direct reports.
• Minimum 1 year experience with cyber-security investigations and incident response.
• Minimum 1+ years of experience in process analysis and improvement.
• Experience with metrics/reporting and KPI delivery.
• Understanding of OSs with vulnerability assessment & hardening.

Responsibilities

• Lead CSOC operations and oversee security engineers/analysts.
• Manage on-call rotation, time off, and staff evaluations.
• Provide training and mentorship; hire staff or contract external services.
• Vendor management, contractual renewals, and SB/RBI reviews.
• Budget management and cost optimization for CSOC activities.
• Coordinate incident response communications and post-mortem reviews.
• Ensure CSOC compliance with internal and external auditors; maintain logging and access controls.
• Collaborate with Threat Intelligence and other departments on incident root causes and mitigations.
• Plan annual CSOC spend and resource requirements.

Skills

Leadership

Strategic thinking

Incident response

Threat analysis

Communication

Education

Bachelor's degree in related field

Tools

Splunk

Sumo Logic

JIRA

Planner

Job description

The Sherwin-Williams Company is seeking a Cybersecurity Security Operations Center (CSOC) Manager to lead a team of security engineers and analysts. The role focuses on monitoring, alerting, and improving threat posture while coordinating incident response and strategic governance.

The ideal candidate has extensive IT security leadership experience, strong analytics, and the ability to drive cross-functional initiatives across vendors and internal teams.