Senior Cybersecurity Operations Lead

Ritchie Bros.; Westchester (IL); On-site; USD 140,000 - 180,000; Full time

Job summary

RB Global is seeking a Lead, Cybersecurity Operations to guide the security operations team in detecting threats, responding to incidents, and maturing detection capabilities across the organization. You will own end‑to‑end incident response coordination, escalation support for analysts, and cross‑functional collaboration with leadership.

The role requires hands‑on leadership, deep technical expertise, and a track record of improving SOC performance in a fast‑paced threat landscape.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or equivalent practical experience.
• Security+, GCIH, GCIA, GCED, or equivalent certifications.
• 5–8+ years of experience in cybersecurity operations or SOC environments.

Responsibilities

• Lead Cybersecurity Operations Execution & Quality – Oversee day‑to‑day security monitoring, detection, and response activities, ensuring high‑quality investigations and timely remediation of security events and incidents.
• Serve as Primary Technical Escalation Point – Act as the go‑to escalation resource for analysts, providing hands‑on guidance for complex investigations.
• Own Incident Response Lifecycle & Stakeholder Coordination – Lead and coordinate complex security incidents end‑to‑end, while acting as a liaison between leadership and the SOC—translating strategic direction into actionable tasks.
• Drive Detection & Response Maturity (SIEM & Tooling) – Lead SIEM‑driven operations and continuously improve detection capabilities through use‑case development, telemetry optimization, and enhanced coverage.
• Coordinate SME Programs & Operational Initiatives – Break down strategic cybersecurity objectives into actionable workstreams, track progress and remove blockers.
• Develop & Optimize Playbooks, Processes, and Automation – Create incident response playbooks, SOPs and automation opportunities to improve consistency and efficiency.
• Leverage Metrics & Threat Insights to Drive Improvement – Track MTTD/MTTR and conduct advanced threat analysis to inform decisions.

Skills

Incident response leadership

Security operations

Threat detection

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

SIEM platforms

EDR

NDR

Email security

WAF

Identity monitoring tools

Job description

RB Global is seeking a Lead, Cybersecurity Operations to guide the security operations team in detecting threats, responding to incidents, and maturing detection capabilities across the organization. You will own end‑to‑end incident response coordination, escalation support for analysts, and cross‑functional collaboration with leadership.

The role requires hands‑on leadership, deep technical expertise, and a track record of improving SOC performance in a fast‑paced threat landscape.