Security Operations Lead

JobAps; Hartford (CT); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Connecticut Department of Administrative Services (DAS) is seeking a Security Operations Lead (Information Technology Manager 2) to direct the state's security operations for Executive Branch services. The role will oversee a virtual SOC, SIEM/SOAR platforms, EDR, incident response, and digital forensics, supervising security staff and coordinating across agencies.

The position requires strong leadership, incident coordination, and the ability to plan staffing, training, and budgets for

Qualifications

• Experience leading security operations teams.
• Ability to coordinate cyber incident response across agencies.
• Knowledge of digital forensics processes and evidence handling.
• Supervisory experience of security operations staff or contractors.

Responsibilities

• Direct the Security Operations Center and monitor platforms and alerts.
• Oversee enterprise SIEM/SOAR platforms and data onboarding.
• Coordinate with agencies and partners on incidents and recovery.
• Direct digital forensic investigations and deliver findings to stakeholders.
• Supervise security ops staff and contractors; manage performance.

Skills

Security operations

Incident coordination

Digital forensics

Staff supervision

Education

College training in CS or MIS

Bachelor’s degree preferred

Job description

Introduction

The State of Connecticut Department of Administrative Services (DAS), Bureau of Information Technology Solutions (BITS) is currently accepting applications for an anticipated Security Operations Lead (Information Technology Manager 2) to direct security operations for the Connecticut Executive Branch. BITS runs the state's shared technology services and its enterprise security program, protecting the systems and data of Executive Branch employees.

WHAT WE CAN OFFER YOU

Our State Employee Benefits Overview page! Professional growth and development opportunities. A healthy work/life balance to all employees.

POSITION HIGHLIGHTS

• Hybrid.
• Monday-Friday.
• Location: Hartford, CT.
• Full Time, 40 hours/week.
• First Shift, 8:00 AM to 4:30 PM.
• The position requires availability outside scheduled hours when needed to coordinate and respond to a declared security incident.

THE ROLE

The Security Operations Lead (Information Technology Manager 2) reports to the state Chief Information Security Officer and leads the Security Operations function, including the virtual Security Operations Center, the security information and event management and security orchestration platforms, Endpoint Detection and Response (EDR), security incident response, digital forensics, and others. The position supervises a team of security operations staff. Under the State Response Framework, the role supports cyber incident planning, response, and recovery for state government under Emergency Support Function 17 (ESF-17). The Security Operations Lead can expect to:

• Direct the Security Operations Center and its associated technology platforms, including security monitoring, alert triage, and escalation for executive branch agencies.
• Manage the operation of the enterprise security information and event management and security orchestration platforms, including data onboarding, platform availability, log source coverage, and day‑to‑day operation.
• Direct the state's response to information security incidents, serving as incident coordinator for confirmed incidents and coordinating with affected agencies, the Connecticut Intelligence Center, and internal and external partners.
• Direct digital forensic investigations, including evidence handling and the delivery of findings to legal counsel, human resources, agency leadership, and law enforcement.
• Supervise, assign, and evaluate the work of security operations staff and contracted consultants.
• Establish and report operational measures for the function, including alert volume, coverage of monitored log sources, and time to detect and contain.
• Build and maintain incident response plans, playbooks, and response exercises, coordinated with agency information security officers and, when required, with the Division of Emergency Management and Homeland Security.
• Lead the security team’s collaboration with information technology teams to improve identity security, including access reviews, privileged access management, and conditional access design.
• Manage vendor and service provider relationships supporting security operations.
• Plan the staffing, training, and budget for the function.
• Direct response activity across executive branch agencies during a cyber security incident, including coordination of response with staff outside this position’s normal reporting line.
• Determine when an incident requires escalation to the Chief Information Security Officer for regulatory notification decisions.
• Approve containment actions that may interrupt state systems or service during an active incident.

ABOUT US

DAS provides timely and cost-effective services to state agencies, state employees, municipalities, private industry, and the public. DAS offers a diverse array of programs, encompassing statewide human resources, information technology, fleet vehicle services, building and construction, procurement, grants administration, and beyond.

EXAMPLES OF DUTIES

• Plans, organizes and manages all operations and activities of an information technology services unit, division, function or location; responsible for meeting all data processing or information technology needs of the respective unit, division, function or location;
• Establishes priorities for systems development and information technology projects in accordance with agency requirements;
• Coordinates, plans and manages solution architecture projects;
• Directs the planning, design and implementation of complex storage solution configuration;
• Develops plans for future utilization information technology services in the overall agency program;
• Within the financial resources of the agency ensuring the development of high quality, low-cost technology solutions aligned with the needs of the State and its agencies;
• Aligns information technology planning with the business strategy;
• Leads and influences the development of standards and decisions regarding changes to systems/applications;
• Manages information systems activities within areas such as IT infrastructure and architecture, applications development, networks, computer operations and support;
• Oversees information technology projects from conception to completion;
• Works with leadership team to maximize cross-team contributions;
• Leads information technology operations to ensure exceptional quality and timely response to all customer service issues;
• Interfaces regularly with clients/customers;
• Stays abreast of local, regional and national industry trends;
• Understands the major economic, political, technological and competitive trends affecting technology;
• To capture competitive advantages, searches out challenging opportunities to change, grow, innovate and improve;
• Compares information technology with those of significant competitors and makes appropriate adjustments;
• Coordinates the use key people, resources, technologies, process, and capabilities to reach strategic goals;
• Sets an example by acting in ways that are consistent with shared department values;
• Fosters collaboration by promoting cooperative goals, building trust and enlisting others in a common vision;
• Strengthens staff by providing choice, developing competence and offering visible support;
• Focuses on continuous learning for self and staff;
• Actively acknowledges individual and team accomplishments;
• Leverages technological solutions to meet business needs;
• Leads the recruitment and hiring of staff, including outreach, interview and selection;
• Performs related duties as required.

KNOWLEDGE, SKILL AND ABILITY

• Plan and Deploy for Business Results, which includes the ability to develop and implement business plans, IT plans, budget plans, and human resource plans in order to maximize budget allocations, technology, personnel and other resources to achieve agency and program goals.
• Lead Change, which includes innovation, the ability to be a creative problem solver and a strategic thinker, and the ability to recognize and develop opportunities to grow and develop information technology services in response to customers and a changing work environment.
• Focus on Results and Quality, including exercising and promoting accountability, and the ability to analyze surveys, financial and other data, and use strategic planning and performance measurement techniques to continuously improve performance and maintain competitiveness.
• Understand Customers and Markets, which includes the ability to establish customer satisfaction and loyalty, forecast and conduct market analyses, keep ahead of industry trends and incorporate “best practices” into information technology operations.
• Lead People, including the ability to resolve conflict, communicate effectively, coach and train employees, recognize performance, and foster diversity and teamwork.
• Build Coalitions, including the ability to explain and advocate facts and ideas in a convincing manner, to negotiate with individuals and groups internally and externally, to gain cooperation from others, and to identify the internal and external politics that impact the work of the organization.
• Business Knowledge, including knowledge of the technical, professional, procedural and legal requirements of the specific information technology area.

MINIMUM QUALIFICATIONS - GENERAL EXPERIENCE

Ten (10) years of experience in computer or network administration, architecture, operations, production control, systems development, information technology analysis and planning.

MINIMUM QUALIFICATIONS - SPECIAL EXPERIENCE

Two (2) years of the General Experience must have been in a supervisory capacity or one (1) year of the General Experience must have been in a managerial capacity. NOTE: For state employees this experience is interpreted as two (2) years at the level of an Information Technology Supervisor or one (1) year at the level of an Information Technology Manager 1 or Agency Information Technology Manager.

MINIMUM QUALIFICATIONS - SUBSTITUTIONS ALLOWED

• College training in computer science, management information systems or a closely related field may be substituted for the General Experience on the basis of fifteen (15) semester hours equalling one half (1/2) year of experience to a maximum of four (4) years for a Bachelor’s degree.
• A Master’s degree in computer science, management information systems or a closely related field may be substituted for one (1) additional year of the General Experience.

PREFERRED QUALIFICATIONS

• Possession of a current certification issued by Global Information Assurance Certification (GIAC).
• Experience supervising a team of five (5) or more employees who perform security operations functions.
• Experience working in an operationally focused security role, accountable for the operation of a security operations center.
• Experience serving as the incident coordinator for confirmed information security incidents.
• Experience working in a digital forensic investigation function.

SPECIAL REQUIREMENTS

The Information Technology Project Manager is limited to the Department of Administrative Services, Bureau of Information Technology Solutions and Centers of Information Technology Excellence as identified by the statewide Chief Information Officer. Managers functioning in this capacity oversee a portfolio of large, long range or multiple on-going projects. The complexity of the assignment is determined by project scope, risk exposure, span of control, diversity of skill-sets and capabilities as well as the size of project budget and number of team members. They oversee all phases of projects from conception to completion utilizing PMI standards. Incumbents assigned to positions designated to perform Information Technology Project Management may be required to possess Certification as a Project Management Professional (PMP). The Solutions Architect is limited to the Department of Administrative Services, Bureau of Information Technology Solutions and Centers of Information Technology Excellence as identified by the statewide Chief Information Officer. Managers functioning in this capacity oversee all aspects of solution architect projects which includes the development of technology solutions and mapping business requirements to systems and technical requirements ensuring alignment with the enterprise architectural plan.

Conclusion

AN AFFIRMATIVE ACTION/EQUAL OPPORTUNITY EMPLOYER

ACKNOWLEDGEMENT

As defined by Sec. 5-196 of the Connecticut General Statutes, a job class is a position or group of positions that share general characteristics and are categorized under a single title for administrative purposes. As such, a job class is not meant to be all-inclusive of every task and/or responsibility.