Senior Cybersecurity Manager

Jobtailor; San Jose (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

Jobtailor is seeking an accomplished security leader to capably manage a 24/7 SOC, shape enterprise security strategy, and drive threat detection across cloud and on‑prem environments. You will direct incident response, run tabletop exercises, and mentor a growing security team in a fast‑paced setting.

Deliver impact through advanced SIEM/EDR integrations, vulnerability management, and IAM programs while coordinating with IT, Legal, and executives to align security with business goals.

Qualifications

• 8+ years of relevant cybersecurity or IT security experience, with at least 3‑4 years in a management or lead role.
• Proven track record managing SOC operations and leading incident response efforts.
• Strong working knowledge of core security operations—threat detection, incident management, vulnerability management, and compliance.
• Hands‑on experience securing cloud‑native environments (AWS, Azure, or GCP).
• Deep knowledge of SIEM/SOAR platforms such as Splunk, Microsoft Sentinel, or Palo Alto XSOAR.
• Expertise in EDR/XDR technologies such as CrowdStrike or SentinelOne.
• Strong understanding of Zero Trust Architecture, SASE, and modern IAM protocols (SAML, OIDC).
• Excellent communication and stakeholder management skills with the ability to lead through influence across IT, Legal, and business teams.
• Experience managing contractor teams and third‑party vendor relationships in a security context.

Responsibilities

• Lead the 24/7 SOC to ensure high‑fidelity monitoring and rapid threat response across all corporate environments.
• Maintain the Incident Response (IR) plan and serve as Incident Commander during security breaches.
• Conduct regular tabletop exercises to validate team readiness and build operational capabilities.
• Oversee threat hunting and the development of custom detection logic for SIEM and EDR platforms.
• Manage SOC contractor team and existing team lead, providing guidance, oversight, and direction on daily operations.
• Own the enterprise security function—ensuring all corporate assets, cloud services, and procured products are configured securely, monitored, and compliant with internal policy.
• Collaborate with IT to enforce secure configurations across platforms including Microsoft Teams, email, cloud services, and internal product deployments.
• Partner with IT on vulnerability remediation, patch management, Identity and Access Management (IAM), endpoint security, and network security architecture.
• Execute a multi‑year security roadmap aligned with NETGEAR business goals, with AI integration as a core pillar.
• Leverage AI technologies and analytics to identify threat patterns, predict risk, and accelerate incident response.
• Drive adoption of automated security tooling to improve detection accuracy and reduce mean time to respond (MTTR).
• Partner with GRC teams to ensure compliance with frameworks including SOC 2, ISO 27001, GDPR, and HIPAA.
• Assist in conducting security assessments, penetration tests, and third‑party risk reviews.
• Manage the security budget including vendor selection and tool rationalization.
• Maintain and test business continuity and disaster recovery plans for security operations.
• Mentor security team members with a focus on technical excellence and career development.
• Communicate security risks and program health clearly to executive leadership.
• Serve as the organization’s subject matter expert for cybersecurity threats and information security.
• Partner with Legal, IT, and senior leadership to align security priorities with organizational goals.

Skills

Threat Detection

Incident Management

Vulnerability Management

Cloud Security

SIEM/SOAR Platforms

EDR/XDR Technologies

Zero Trust Architecture

IAM Protocols

Security Assessments

Penetration Testing

Tools

Splunk

Microsoft Sentinel

Palo Alto XSOAR

CrowdStrike

SentinelOne

Job description

• Lead the 24/7 SOC to ensure high‑fidelity monitoring and rapid threat response across all corporate environments.
• Maintain the Incident Response (IR) plan and serve as Incident Commander during security breaches.
• Conduct regular tabletop exercises to validate team readiness and build operational capabilities.
• Oversee threat hunting and the development of custom detection logic for SIEM and EDR platforms.
• Manage SOC contractor team and existing team lead, providing guidance, oversight, and direction on daily operations.
• Own the enterprise security function—ensuring all corporate assets, cloud services, and procured products are configured securely, monitored, and compliant with internal policy.
• Collaborate with IT to enforce secure configurations across platforms including Microsoft Teams, email, cloud services, and internal product deployments.
• Partner with IT on vulnerability remediation, patch management, Identity and Access Management (IAM), endpoint security, and network security architecture.
• Execute a multi‑year security roadmap aligned with NETGEAR business goals, with AI integration as a core pillar.
• Leverage AI technologies and analytics to identify threat patterns, predict risk, and accelerate incident response.
• Drive adoption of automated security tooling to improve detection accuracy and reduce mean time to respond (MTTR).
• Partner with GRC teams to ensure compliance with frameworks including SOC 2, ISO 27001, GDPR, and HIPAA.
• Assist in conducting security assessments, penetration tests, and third‑party risk reviews.
• Manage the security budget including vendor selection and tool rationalization.
• Maintain and test business continuity and disaster recovery plans for security operations.
• Mentor security team members with a focus on technical excellence and career development.
• Communicate security risks and program health clearly to executive leadership.
• Serve as the organization’s subject matter expert for cybersecurity threats and information security.
• Partner with Legal, IT, and senior leadership to align security priorities with organizational goals.

Requirements

• 8+ years of relevant cybersecurity or IT security experience, with at least 3‑4 years in a management or lead role.
• Proven track record managing SOC operations and leading incident response efforts.
• Strong working knowledge of core security operations—threat detection, incident management, vulnerability management, and compliance.
• Hands‑on experience securing cloud‑native environments (AWS, Azure, or GCP).
• Deep knowledge of SIEM/SOAR platforms such as Splunk, Microsoft Sentinel, or Palo Alto XSOAR.
• Expertise in EDR/XDR technologies such as CrowdStrike or SentinelOne.
• Strong understanding of Zero Trust Architecture, SASE, and modern IAM protocols (SAML, OIDC).
• Excellent communication and stakeholder management skills with the ability to lead through influence across IT, Legal, and business teams.
• Experience managing contractor teams and third‑party vendor relationships in a security context.

Hard Skills

• Threat Detection
• Incident Management
• Vulnerability Management
• Cloud Security (AWS, Azure, GCP)
• SIEM/SOAR Platforms (Splunk, Microsoft Sentinel, Palo Alto XSOAR)
• EDR/XDR Technologies (CrowdStrike, SentinelOne)
• Zero Trust Architecture
• IAM Protocols (SAML, OIDC)
• Security Assessments
• Penetration Testing

Soft Skills

• Excellent Communication
• Stakeholder Management
• Team Leadership
• Mentoring
• Influence Across Teams