Security Operations Manager

KamisPro; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

KamisPro seeks an experienced Security Operations Manager to lead and continuously improve the security operations program for an established law firm (AmLaw 200). This role oversees security monitoring, incident response, vulnerability management, technologies, and risk reporting to protect enterprise systems and confidential client information.

Reporting to the Director of Information Security, you will guide security personnel and external providers while partnering with IT, Legal, Privacy,

Qualifications

• Bachelor’s degree or equivalent combination of education and experience.
• 10+ years in information security with at least 5 years in security operations, incident response, or related leadership roles.
• Experience leading personnel and managing external security providers and technologies.
• Strong knowledge of incident response, threat detection, vulnerability management, and security controls.
• Hands-on with SIEM, SOAR, EDR/XDR, IAM, network, cloud security, and vulnerability tools.
• Familiarity with NIST, ISO 27001/27002, CIS Controls, and MITRE ATT&CK.
• Experience developing operational metrics, procedures, and executive risk communications.
• Excellent communication, project management, vendor management, and risk-based decision making.

Responsibilities

• Lead security operations, including threat monitoring, detection, incident investigation and response, containment, recovery, and post-incident reviews.
• Maintain incident response plans, playbooks, escalation procedures, and readiness for high-severity events.
• Oversee vulnerability management, including risk-based prioritization, remediation tracking, exception management, and reporting.
• Manage and optimize enterprise security technologies (SIEM, SOAR, EDR/XDR, email security, IAM, network, cloud, data protection).
• Develop operational dashboards and executive reporting on incident trends, response effectiveness, vulnerability exposure, and control performance.
• Lead security awareness initiatives, including training and phishing simulations.
• Coordinate security testing, tabletop exercises, audits, client inquiries, and risk assessments.
• Manage security staff, contractors, and MSSPs including performance, service delivery, budgeting, licensing, and resources.
• Provide security guidance on technology initiatives, architecture, integrations, and vendor services.

Skills

Threat monitoring

Incident response

Vulnerability management

Security controls

Communication

Project management

Vendor management

Risk-based decision making

Education

Bachelor’s degree in cybersecurity / information technology / computer science

Tools

SIEM

SOAR

EDR/XDR

Identity & Access Management

Job description

We are seeking an experienced Security Operations Manager to lead and continuously improve the security operations program for an established law firm (AmLaw 200). This individual will oversee security monitoring, incident response, vulnerability management, security technologies, and operational risk reporting to help protect enterprise systems, personnel, and highly confidential client information.

Reporting to the Director of Information Security, the Security Operations Manager will lead security personnel and external service providers while partnering with IT, Legal, Privacy, Risk Management, and business leadership. The ideal candidate combines strong technical knowledge with proven leadership skills, sound judgment, and the ability to communicate security risks effectively to both technical and executive audiences.

Key Responsibilities

• Lead security operations, including threat monitoring, detection, incident investigation and response, containment, recovery, and post-incident reviews.
• Maintain incident response plans, playbooks, escalation procedures, and readiness for high-severity security events.
• Oversee vulnerability management, including risk-based prioritization, remediation tracking, exception management, and reporting.
• Manage and optimize enterprise security technologies, including SIEM, SOAR, EDR/XDR, email security, identity protection, network security, cloud security, and data protection solutions.
• Develop operational dashboards and executive reporting covering incident trends, response effectiveness, vulnerability exposure, control performance, and emerging risks.
• Lead security awareness initiatives, including training, phishing simulations, and targeted education.
• Coordinate security testing, tabletop exercises, audits, client security inquiries, and risk assessments.
• Manage security staff, contractors, and managed security service providers, including performance, service delivery, budgeting, licensing, and resource planning.
• Provide security guidance on technology initiatives, architecture, integrations, vendor services, and significant changes.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or an equivalent combination of education and experience.
• 10+ years of progressive information security experience, including at least five years leading security operations, incident response, security engineering, or a comparable function.
• Demonstrated experience leading personnel and managing external security providers and enterprise security technologies.
• Strong knowledge of incident response, threat detection, vulnerability management, security controls, and common attacker techniques.
• Hands-on understanding of SIEM, SOAR, EDR/XDR, identity and access management, network security, cloud security, and vulnerability management tools.
• Familiarity with NIST, ISO 27001/27002, CIS Controls, and MITRE ATT&CK frameworks.
• Experience developing operational metrics, procedures, and executive-level risk communications.
• Strong communication, project management, vendor management, and risk-based decision-making skills.
• CISSP, CISM, GIAC, Security+, or another relevant security certification preferred.

Preferred Experience

Experience in a law firm, professional services organization, or regulated environment with demanding client confidentiality, privacy, and security obligations is highly desirable.

Work Arrangement

This is a remote position requiring candidates to reside in the Dallas metropolitan area. Periodic travel to a firm office or other locations is required for meetings, training, incident response, and business needs. Evening or weekend availability may be required for significant incidents, maintenance, or other operational needs.