Senior Cybersecurity Operations Lead

RB Global, Inc.; Westchester (IL); On-site; USD 150,000 - 190,000; Full time

Job summary

RB Global, Inc. is seeking a Lead, Cybersecurity Operations to advance our global CSOC capabilities.

This hands-on leader oversees threat detection, incident response, and continuous improvement of security operations across the organization, acting as the escalation point for analysts and liaising with leadership to translate strategy into action. The role emphasizes operational excellence, development of playbooks, and driving improvements in MTTD/MTTR, with deep technical expertise in SIEM,

Qualifications

• Bachelor’s degree or equivalent practical experience in CS, IT, or cybersecurity.
• Security+ or equivalent certifications (GCIH/GCIA/GCED or similar).
• 5–8+ years in cybersecurity operations or SOC environments.
• Proven experience leading or coordinating incident response activities.
• Hands-on experience with SIEM platforms and detection-driven operations.

Responsibilities

• Oversee day-to-day security monitoring, detection, and response activities with high-quality investigations and timely remediation.
• Serve as the primary technical escalation point for analysts and ensure depth in investigative outcomes.
• Own end-to-end incident response lifecycle and coordinate with leadership and SOC for clear updates.
• Drive detection and response maturity through SIEM tooling, use-case development, and telemetry optimization.
• Break down strategic cybersecurity objectives into actionable workstreams and track progress.

Skills

Threat detection

Incident response

Lead/leadership

SIEM tooling

Analytical mindset

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field

Tools

SIEM platforms

EDR

NDR

WAF

Identity monitoring tools

Job description

RB Global, Inc. is seeking a Lead, Cybersecurity Operations to advance our global CSOC capabilities.

This hands-on leader oversees threat detection, incident response, and continuous improvement of security operations across the organization, acting as the escalation point for analysts and liaising with leadership to translate strategy into action. The role emphasizes operational excellence, development of playbooks, and driving improvements in MTTD/MTTR, with deep technical expertise in SIEM,