Senior Manager of Cyber Security Operations

City of New York; New York (NY); Hybrid; USD 150,000 - 190,000; Full time

Job summary

The New York City Housing Authority (NYCHA) is seeking an experienced Senior Manager to lead its Security Operations Center (SOC) and advance its detection and response capabilities. You will own security incidents from detection through resolution, directing the response and reporting to senior leadership.

You will mentor a three‑person security team, drive automation to speed triage, and oversee detection engineering, threat hunting, and AI‑enabled threat readiness in collaboration with IT and

Qualifications

• A baccalaureate degree and four years of related full‑time experience or equivalent education/experience.
• Experience with SIEM, EDR, and incident response is highly preferable.
• In-depth knowledge of security operations, threat detection, and reporting requirements.

Responsibilities

• Team Leadership: mentor and develop SOC analysts, assign work, set goals, and participate in hiring.
• SOC Operations: direct day-to-day monitoring, alert triage, investigation, escalation, and incident response.
• Leadership Communication: provide clear incident updates to senior leadership and regulators.
• Readiness and Continuous Improvement: maintain playbooks, run tabletop exercises, and drive post‑incident reviews.
• Detection Engineering and Threat Hunting: develop detections, hunt threats, and adapt to AI‑enabled techniques.
• Collaboration with IT: coordinate with IT to investigate and remediate security events.

Skills

SIEM Splunk

EDR CrowdStrike

Incident Response

MITRE ATT&CK

AI in Sec Ops

Threat Hunting

Automation

Regulatory Compliance

Education

Bachelor's degree

Tools

Splunk

CrowdStrike Falcon

Job description

The New York City Housing Authority (NYCHA), the largest public housing authority in North America, provides decent, affordable housing for low- and moderate-income New Yorkers. NYCHA is home to 1 in 17 New Yorkers, providing affordable housing to over 500,000 authorized residents through public housing and Permanent Affordability Commitment Together (PACT) programs as well as Section 8 housing. NYCHA has nearly 200,000 apartments in over 2,400 buildings across 335 conventional public housing and PACT developments. In addition, NYCHA connects residents to critical programs and services from external and internal partners, with a focus on economic opportunity, youth, seniors, and social services. With a housing stock that spans all five boroughs, NYCHA is a city within a city.

Under direction of the Chief information Security Officer, with wide latitude for independent initiative and judgement, NYCHA is looking for an experienced manager to lead its Security Operations Center (SOC) and take it to the next level. This role is about more than keeping the lights on: the Senior Manager will mature the SOC's detection and response capabilities, drive automation to make the team faster and more consistent, and prepare NYCHA for a threat landscape increasingly shaped by artificial intelligence, both by defending against AI-enabled attacks and by putting AI to work in security operations. This individual owns every security incident from detection through resolution, evaluating and assessing each event, directing the response, and keeping senior leadership informed with clear, timely updates. The ideal candidate brings hands‑on experience in incident response and detection engineering, stays calm under pressure, and is a proven leader who develops their analysts and builds a collaborative team. The selected candidate will lead a team of three security analysts and report directly to the Chief Information Security Officer.

Roles and Responsibilities

• Team Leadership: Mentor and develop SOC analysts, assign work based on skills and experience, set goals, evaluate performance, and participate in hiring as the team grows.
• SOC Operations: Direct the day-to-day operations of the SOC, including monitoring, alert triage, investigation, and escalation, and lead the response to all security incidents from detection through recovery. Assess current SOC capabilities and maintain a roadmap to mature them, tracking progress through metrics such as mean time to detect and respond.
• Leadership Communication: Provide clear and timely incident updates to senior leadership and support required regulatory and oversight reporting.
• Readiness and Continuous Improvement: Maintain incident response playbooks and procedures, run tabletop exercises, and lead post-incident reviews to identify root causes and drive changes that prevent recurrence.
• Detection Engineering and Threat Hunting: Oversee the development and tuning of detection rules, guide proactive threat hunting informed by threat intelligence, and keep detections current with evolving attacker techniques, including AI-enabled threats automate triage, enrichment, and response actions to improve speed and consistency.
• Collaboration with IT: Work closely with IT infrastructure, application, and service desk teams to investigate and remediate security events and to ensure monitoring is built into new systems.

Additional Information

1. NYCHA employees applying for transfer, promotional, title or level change opportunities must have served a period of one year at current location and in current title and level (if applicable).

2. NYCHA residents are encouraged to apply.

3. NYCHA provides benefits that include a choice of medical coverage plans, deferred compensation plans and a defined pension benefit plan as a member of the New York City Employees’ Retirement System (NYCERS).

IT SECURITY SPECIALIST - 95622

Minimum Qualifications

A baccalaureate degree from an accredited college and four years of satisfactory full‑time experience related to projects and policies required by the particular position; or,

Education and/or experience which is equivalent to "1" above.

Preferred Skills

• Security Information and Event Management (SIEM): In-depth knowledge of Splunk or equivalent SIEM platforms for real-time monitoring, log analysis, and threat detection, with the ability to design effective searches, alerts, dashboards, and reports.
• Endpoint Detection and Response (EDR): Proficiency in using CrowdStrike Falcon or similar EDR solutions to detect, investigate, contain, and remediate threats on endpoints.
• Incident Response and Forensics: Extensive hands‑on experience leading incident response, including evidence collection, host and network forensics, malware triage, and root cause analysis.
• Threat Detection and Hunting: Strong working knowledge of the MITRE ATT&CK framework and hands‑on experience building detections and conducting hunts mapped to attacker tactics and techniques.
• AI in Security Operations: Experience applying AI and machine learning capabilities to alert triage, investigation, and response, with an understanding of their limitations and risks.
• Monitoring and Investigation: Experience monitoring and investigating activity across network, identity, email, cloud, and data protection.
• Automation and Scripting: Ability to use scripting languages (such as PowerShell, Python, or Bash) and security orchestration tools to automate SOC tasks and streamline incident response.
• Regulatory Compliance: Understanding of industry standards (e.g., NIST CSF, NIST SP 800-61, ISO 27001) and experience with incident reporting obligations in a public‑sector or regulated environment.
• Able to be in the office three days per week and part of a hybrid work environment.

Public Service Loan Forgiveness

As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/.

Residency Requirement

NYCHA has no residency requirements.

Additional Information

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.