Security Operations Lead (Information Technology Manager 2)

Civicworks; Hartford (CT); Hybrid; USD 120,000 - 170,000; Full time

Job summary

The Civicworks Security Operations Lead in Hartford, CT directs the Security Operations Center, monitors enterprise security platforms, and coordinates incident response and digital forensics.

This senior IT security role is hybrid, full-time and requires availability outside normal hours to respond to security incidents, with supervision of staff and liaison to the Chief Information Security Officer.

Qualifications

• Experience directing or managing security operations centers and enterprise security platforms.
• Expertise in incident response, digital forensics, and cyber security incident coordination.
• Knowledge of SIEM and security orchestration tools.
• Experience supervising technical staff and managing vendor/service provider relationships.
• Familiarity with identity security, privileged access management, and enterprise information security practices.
• Understanding of emergency management frameworks and incident response planning.

Responsibilities

• Directs Security Operations Center and monitors enterprise security platforms.
• Coordinates incident response, digital forensics, and cyber security incident coordination.
• Supervises security operations staff and liaises with vendors and service providers.
• Responds to cyber incidents and supports emergency management and recovery efforts.

Skills

Security operations

Incident response

Digital forensics

SIEM

Vendor management

Access management

Job description

The Security Operations Lead (Information Technology Manager 2) directs security operations for the Connecticut Executive Branch, managing the Security Operations Center, security monitoring platforms, endpoint detection and response, and incident response functions. The role reports to the Chief Information Security Officer, supervises security operations staff, and coordinates the state's response to cyber incidents, digital forensic investigations, and emergency support functions. This is a hybrid, full-time position in Hartford, CT, requiring availability outside normal hours to respond to declared security incidents.

Key qualifications:

• Experience directing or managing security operations centers and enterprise security platforms
• Expertise in incident response, digital forensics, and cyber security incident coordination
• Knowledge of security information and event management (SIEM) and security orchestration tools
• Experience supervising technical staff and managing vendor/service provider relationships
• Familiarity with identity security, privileged access management, and enterprise information security practices
• Understanding of emergency management frameworks and incident response planning