security operations center manager

RATP Dev

<div><h2 class="jobSectionHeader"><b>Cybersecurity Manager</b></h2>
<div><ul><li><div>Fixed-term contract</div>
</li>
<li><div>Full-time</div>
</li>
<li><div>At least 10 years of experience (Professional)</div>
</li>
<li><div>Bachelor degree</div>
</li>
<li><div>Cyber Security Manager/Expert</div></li></ul></div></div>
<br><div><div><div><div><h2 class="jobSectionHeader"><b>Mission
</b></h2><p></p><div><p><b>JOB PURPOSE:</b></p><p>
The Cybersecurity Manager is responsible for the strategic design, implementation, and continuous maturation of the company&rsquo;s cybersecurity posture across all business units. This role oversees local security operations, leads the in-house Security Operations Center (SOC), ensuring compliance with ISO 27001 certification and ensuring alignment with recognized security frameworks (NIST CSF). By leading Governance, Risk, and Compliance (GRC) initiatives and fostering cross-functional partnerships with IT and Digital teams, the Manager ensures the resilience of the organization&rsquo;s digital ecosystem against emerging threats.</p></div></div><p></p><div><br>
<h2 class="jobSectionHeader"><b>Profile
</b></h2><p></p><div><p><b>RESPONSIBILITIES/DUTIES</b></p><p><b>
Cybersecurity Governance &amp; Strategy</b></p><ul><li> Develop and execute the company-wide cybersecurity strategy in alignment with organizational objectives.</li><li> Design, maintain, and enforce a robust suite of security policies, standards, and procedures based on ISO 27001 and NIST CSF to ensure operational consistency.</li><li> Drive the end-to-end ISO 27001 certification lifecycle, including initial gap analysis, control implementation, and final readiness audits.</li><li> Establish a high-maturity GRC ecosystem to centralize risk management, regulatory compliance, and corporate security governance.</li></ul><p><b>
Security Operations &amp; SOC Management</b></p><ul><li> Provide strategic direction and technical mentorship to the SOC team, fostering a culture of continuous learning and incident excellence.</li><li> Standardize SOC workflows&mdash;including SIEM tuning, threat hunting, alert triage, and incident response&mdash;to meet or exceed industry benchmarks.</li><li> Develop and present high-level SOC performance metrics, and KPI dashboards to senior management and relevant stakeholders.</li></ul><p><b>
Technical Security Oversight</b></p><ul><li> Direct the deployment and lifecycle management of advanced security solutions, including Firewalls, EDR/XDR, IDS/IPS, IAM, and Endpoint Protection.</li><li> Coordinate comprehensive vulnerability scans, penetration tests, ensuring prioritized remediation based on business impact.</li><li> Mandate and audit secure configuration standards and &quot;Security by Design&quot; principles across cloud infrastructure, and business applications.</li></ul><p><b>
Cybersecurity Risk Management</b></p><ul><li> Lead enterprise-level cybersecurity risk assessments to identify, evaluate, and mitigate potential threats, maintaining a dynamic and actionable Risk Register.</li><li> Define and oversee the security vetting process for vendors and third-party partners.</li></ul><p><b>
Awareness, Training &amp; Culture</b></p><ul><li> Champion a security-first culture through the design and delivery of a comprehensive cybersecurity awareness program.</li><li> Manage phishing simulations and targeted training campaigns to reduce the organization&rsquo;s human-risk surface.</li></ul><p><b>
Compliance, Audit &amp; Reporting</b></p><ul><li> Act as the primary liaison for internal and external auditors, ensuring the integrity of evidence for ISO 27001 and regulatory audits.</li><li> Continuously monitor the legal and regulatory landscape to ensure organizational compliance with data protection and cybersecurity mandates.</li></ul><p><b>
Safety Responsibilities</b></p><ul><li> Promote a positive safety culture within the workplace and attend any safety-related meetings or briefings as required within the job role.</li><li> Comply with the requirements of RDMC RQHSE Policy and Safety Management System.</li><li> Be mindful that Safety, Security, and Environmental protection are everyone&rsquo;s responsibility. All staff members are accountable for reporting and intervening in any Safety, Security, or Environmental violations.</li></ul><p><b>
ESSENTIAL QUALIFICATIONS, KNOWLEDGE &amp; EXPERIENCE</b></p><p><b>
QUALIFICATIONS:</b></p><ul><li> Bachelor&rsquo;s degree in Computer Science, Business Information Systems, Information Security or a related field (required).</li><li> CISSP, CISM, or CISA certifications are preferred.</li><li> ISO 27001 Lead Implementer or Lead Auditor is preferred.</li><li> ITIL Foundation is a plus.</li><li> Fluent in English and Arabic, French is a plus.</li></ul><p><b>
KNOWLEDGE:</b></p><ul><li> Advanced understanding of network security, cloud security, cryptography, and application security.</li><li> Strong knowledge of ISO 27001, NIST Cybersecurity Framework, and GRC practices.</li></ul><p><b>
EXPERIENCE:</b></p><ul><li> 10+ years of experience in Cybersecurity roles, with at least 3 years in team leadership.</li><li> Proven experience managing SOC operations and security engineering team.</li><li> Strong track record of cross-functional collaboration and stakeholder engagement.</li></ul><p><b>
DESIRED BEHAVIORS &amp; EXPERIENCES</b></p><ul><li> <b>Influence &amp; Engagement:</b> Builds strong relationships and effectively engages with cross-functional stakeholders to achieve alignment and buy-in.</li><li> <b>Analytical Thinking: </b>Evaluates complex problems, interprets data effectively, and makes sound decisions based on insights.</li><li> <b>Execution Excellence:</b> Delivers high-quality outcomes on time, manages multiple priorities, and ensures effective follow-through.</li><li> <b>Change Agility:</b> Adapts quickly to evolving needs, leads change with confidence, and helps others navigate transitions smoothly.</li><li> <b>Communication:</b> Expresses ideas clearly and professionally, prepares impactful documentation, and engages effectively with diverse audiences.</li><li> <b>Collaboration: </b>Promotes teamwork, shares knowledge openly, and supports others to achieve common goals.</li><li> <b>Attention to Detail:</b> Maintains accuracy and consistency in documentation, reporting, and system configurations.</li><li> <b>Accountability:</b> Demonstrates ownership, responsibility, and reliability in delivering on objectives.</li><li> <b>Resilience:</b> Remains composed under pressure, solves problems calmly, and stays focused on long-term results.</li></ul></div></div></div></div><br>
<p></p>
<div><div><div><h3 class="jobSectionHeader"><b>Location</b></h3>
<p></p><div><div><div><b>Location</b></div></div><b>
</b><div><b>Address</b></div><b>
</b></div><p>Cairo, Cairo, Egypt</p></div></div></div></div><div></div>

Cybersecurity Manager

Department of Administrative Services

<div><div>Initial Posting Date:</div>
03/19/2026<div></div><div>
Application Deadline:</div>
04/05/2026<div></div><div>
Agency:</div>
Department of Administrative Services<div></div><div>
Salary Range:</div>
$8,717 - $13,477<div></div><div>
Position Type:</div>
Employee<div></div><div>
Position Title:</div>
SOC Manager (IT Cyber Security Manager 2)<div></div><div>
Job Description:</div><div>
Now Hiring, Apply Today! SOC Manager (IT Cyber Security Manager 2)</div><div><div>
Enterprise Information Services</div> (EIS) is a state government-wide information technology (IT) organization led by Oregon&rsquo;s State Chief Information Officer (CIO). The <div>Cyber Security Services</div> (&ldquo;CSS&rdquo;) is an information security management section within EIS. CSS&rsquo;s mission: Leading Oregon Government to safeguard the State&rsquo;s information resources. CSS is comprised of the following units: Governance Risk and Compliance, Enterprise Security Architecture, Network Security, and Security Operations Center (SOC).</div><div></div><div>
What You&rsquo;ll Do</div><div>
As the SOC Manager, you will be at the center of Oregon&rsquo;s cyber defense, the heartbeat of the enterprise, leading the day-to-day operations of the State of Oregon&rsquo;s Security Operations Center and ensuring continuous monitoring, detection, analysis, and response to threats that impact enterprise (State of Oregon) systems and critical public services. You will guide and grow an extremely talented team of SOC analysts, maintain 24x7 readiness, and make sure the tools, workflows, playbooks, and escalation paths are not just documented, but tested and battle-ready. You will turn strategy into action, translate the SOC Director&rsquo;s vision and enterprise direction into operational excellence, and lead the charge during high-impact incidents where clear thinking, calm leadership, and teamwork matter most. Working side-by-side with Network, Endpoint, Cloud, Vulnerability, and agency partners across the state, you will help coordinate response, protect Oregonians&rsquo; data, and continuously strengthen our security posture. This is a role for a leader who thrives in fast-moving environments, loves developing people, and wants to make a real, visible impact&mdash;every day&mdash;on the security and resilience of the State of Oregon.</div><div></div><div>
For a full review of the position duties, details, and working conditions, please click <div>here.</div></div><div></div><div>
This Is What You Need to Qualify</div><ul><li><div>
Six years of supervision, management, or progressively related experience*; OR</div></li><li><div>
Three years of related* experience and a bachelor's degree in a related* field.</div></li></ul><div></div><ul><li>Related qualifying information systems experience in: Microsoft Defender for Endpoint, Identity, Office 365, and Cloud Apps, Attack surface reduction (ASR), device timeline, evidence &amp; response actions, Live response sessions and EDR forensics; Qualifying Bachelor degree in Information Technology, Computer Science, or closely related field.</li></ul><div></div><div>
The ideal candidate will possess the following desired skills and attributes:</div><ul><li><div>
A strong foundation in cybersecurity operations, with the ability to understand, oversee, and guide threat detection, incident response, vulnerability management, and security monitoring across on-premises, cloud, and hybrid environments.</div></li><li><div>
Operational fluency with modern SOC technologies and workflows, including SIEM, EDR/XDR, log management, alerting, case management, and investigation platforms, with the ability to ask the right questions, challenge assumptions, and make informed decisions when not hands-on in the tools.</div></li><li><div>
The mindset of a cyber operations leader, able to direct investigations, validate analyst conclusions, prioritize response actions, and ensure incidents are managed effectively from triage through recovery.</div></li><li><div>
A deep understanding of how enterprise identity, endpoints, networks, cloud services, and security controls interconnect, and how attackers move across them, utilizing the MITRE Att&amp;ck Methods.</div></li><li><div>
Proven ability to build, mentor, and sustain high-performing SOC teams, fostering trust, accountability, resilience, and calm leadership in high-pressure, 24x7 environments.</div></li><li><div>
The judgment to balance risk, impact, and operational tempo, ensuring the right resources are focused on the most critical threats and that staff are supported and not burned out.</div></li><li><div>
The ability to evaluate and improve SOC processes, playbooks, tooling, and staffing models, turning gaps and lessons learned into practical operational improvements.</div></li><li><div>
Strong communication and leadership presence, with the ability to translate technical realities into clear guidance for executives, agency partners, and incident commanders.</div></li><li><div>
Experience coordinating complex incident response efforts across multiple teams, agencies, and external partners, bringing clarity, structure, and confidence during major events.</div></li><li><div>
Extensive experience (typically 7+ years in cybersecurity, including leadership or senior operational roles within a SOC, IR, or security operations environment).</div></li><li><div>
Familiarity with security frameworks and best practices (NIST CSF, incident response lifecycle, MITRE ATT&amp;CK) and how to apply them at an operational and programmatic level.</div></li></ul><div></div><div>
Preference Statement</div><div>
Preference will be given to candidates with one or more of the following certifications: CISSP: (Certified Information Systems Security Professional), SC-200: Microsoft Security Operations Analyst, SC-100: Cybersecurity Architect, AZ-500: Azure Security Engineer, CompTIA CySA+ or Security+ , GIAC (GCIA, GCIH, GMON) for advanced threat hunting.</div><div></div><div>
How to Apply</div><ul><li><div>
Click on the &quot;Apply&quot; link above to complete your online application and submit by the posted closing date and time. For step-by-step instructions click <div>apply to work for the state</div> or <div>current state employee.</div></div></li><li><div>
Required Documents: cover letter and resume</div></li><li><div>
The work experience and/or education section of your application must clearly demonstrate how you meet all the minimum qualifications and desired skills and attributes listed above. Your cover letter should address your skills supporting an enterprise level environment. <i>Failing to attach required documents may result in disqualification of your application.</i></div></li><li><div>
The State of Oregon does not request or require your age, date of birth, attendance or graduation dates from an educational institution during the application process.</div></li></ul><ul><li><div>
Be sure to check Workday and your email for additional tasks and updates. After hitting submit there may be additional required tasks for you to complete prior to the announcement closing. Please save a copy of this job announcement for reference, as it is not available for you to view after the announcement deadline.</div></li></ul><ul><li><div>
If you are requesting Veteran&rsquo;s Preference, you will receive a Workday task to submit your supporting documents. Be sure to submit your documentation prior to the close date of this posting in order to have the preference considered. Click on the following link for additional information on <div>Veterans&rsquo; Preference</div>.</div></li></ul><div></div><div>
Benefits of Joining Our Team</div><div>
The Department of Administrative Services (DAS) Team strives to create an environment that is supportive and encourages work-life balance and innovation. The EIS team is built on collaboration and support. We work together to ensure our customer agencies receive the highest quality of service. We take pride in our work and look for ways to innovate. EIS is committed to hiring highly skilled, diverse and dedicated employees who will bring a unique skill set to the team.</div><div>
Our amazing <div>benefits</div> include:</div><ul><li><div>
Comprehensive Health Coverage: Low-cost medical, vision, and dental plans for you and your family. Additional benefits include life insurance, short- and long-term disability, deferred compensation savings plans, and flexible spending accounts for health and childcare. Optional benefits including life insurance, disability, FSA, and more</div></li><li><div>
Generous Paid Time Off: 11 holidays, 3 personal business days, monthly sick leave and vacation leave that increases with years of service.</div></li><li><div>
Career Development: Opportunities for professional growth and advancement.</div></li><li><div><div>
Get There</div><ul><li>Oregon&rsquo;s easy-to-use carpool matching tool and trip planner.</li></ul></div></li><li><div><div>
Public Service Loan Forgiveness</div>: You may qualify for the PSLF program.</div></li><li><div>
Hybrid Work Opportunity: This position supports a hybrid work schedule. You can expect to work in the office 1 day per week, with work arrangements periodically reviewed to ensure business needs are met.</div></li></ul><div></div><div>
Additional Details</div><ul><li><div>
This announcement is for one, full-time, permanent, Management Service- Supervisory, SOC Manager (IT Cyber Security Manager 2) position and may be used to fill future vacancies.</div></li><li><div>
The salary listed is the non-PERS qualifying salary range. If the successful candidate is PERS qualifying, the salary range will reflect an additional 6.95%.</div></li><li><div>
Review the <div>Classification and Compensation</div> page for more details on the classification, or you may visit our website for information on the job offer process following <div>pay equity</div>.</div></li><li><div>
Applicants must be authorized to work in the United States. Applicants who require VISA sponsorship will not be considered at this time.</div></li><li><div>
Employee will be required to possess and maintain a valid driver&rsquo;s license issued by the state where the employee resides or provide an acceptable alternate form of transportation.</div></li><li><div>
Employee is required to obtain and maintain CJIS clearance.</div></li><li><div>
Finalists will be subject to a computerized criminal history check. Adverse background data may be grounds for immediate disqualification.</div></li><li><div>
If you need an application in an alternate format in order to complete the process or for accommodation requests under the Americans with Disabilities Act (ADA), you may contact the Recruiter, Nancy Karnas at: nancy.karnas@das.oregon.gov | 971-719-3083.</div></li></ul><div></div><div>
Helpful Links &amp; Resources</div><div><div>
How to Set Job Alerts</div> | <div>Workday Applicant FAQ</div> | <div>What You Need to Know to Get the Job</div></div><div><div>
Oregon Job Opportunities Webpage</div> | <div>Classification and Compensation</div> | <div>Pay Equity</div></div><div></div><div><i>
Come for a job. | Stay for a career. | Make a difference... for a lifetime!</i></div><div></div><div><i>
The Department of Administrative Services is an Equal Opportunity, Affirmative Action Employer Committed to Workforce Diversity. At the Department of Administrative Services, we embody the value of hiring a workforce representative of the communities we serve, understanding that a diverse workforce revitalizes our state. We value diversity and foster a positive and welcoming environment where all employees can thrive.</i></div></div><div></div>

SOC Manager (IT Cyber Security Manager 2)

Barracuda Networks

<div><div>Come join our passionate team! Barracuda is a leading cybersecurity company providing complete protection against complex threats. Our platform protects email, data, applications, and networks with innovative solutions, and a managed XDR service, to strengthen cyber resilience. Hundreds of thousands of IT professionals and managed service providers worldwide trust us to protect and support them with solutions that are easy to buy, deploy, and use.</div><div>
</div><div>
We know a diverse workforce adds to our collective value and strength as an organization. Barracuda Networks is proud to be an Equal Opportunity Employer, committed to equal employment opportunity and equitable compensation regardless of race, gender, religion, sex, sexual orientation, national origin, or disability.</div><div><b>
</b></div><div><b>
Envision Yourself at Barracuda</b></div><div></div><div>
The Manager, Cybersecurity Analysts, will support the timely delivery of Barracuda XDR services for our customer base. The Manager, Cybersecurity Analysts works among a skilled global SOC team to address security matters across Barracuda XDR customer base. This role supports 24x7x365 operations.<br>
<br>
<b>What you&rsquo;ll be working on:</b></div><div>
</div><ul><li>
Full management of direct reports, which consists of Cybersecurity Analysts.</li><li>
Oversee and maintain quality control of tickets, phone calls, and overall quality of all SOC related tasks.</li><li>
Responsible for the overall performance of the Blue Team.</li><li>
Manage and maintain the Blue Team shift schedule.</li><li>
Ensure customer escalations are handled in a timely manner via email and meeting.</li><li>
Measure and report Blue Team key performance indicators (SLAs, metrics, etc.)</li><li>
Conduct gap analysis to improve overall operations of the SOC.</li><li>
Collaborate with other SOC teams to ensure operational efficiency and quality.</li><li>
Ensure full coverage of core SOC processes including but not limited to:<ul><li>
Alarm runbooks</li><li>
Alert macros</li><li>
Escalation procedure</li></ul></li></ul><ul><li>
Automate tasks to drive efficiency and quality amongst the Blue Team.</li><li>
Serve as primary point of escalation for Blue Team questions and issues.</li><li>
Ongoing updating of our SOC knowledgebase and training program.</li><li>
Responsible for mentoring new Cybersecurity Analysts throughout their training.</li><li>
Provide ongoing training to the SOC team as a whole.</li><li>
Oversee accuracy of Blue Team shift turnover information.</li><li>
Lead recurring forums such as SOC All Hands and Emerging Threats.</li><li>
Manage vulnerability assessment process/service delivery.</li></ul><div></div><div><b>
What you&rsquo;ll bring to the role:</b><br>
</div><ul><li>
5+ years working in a Security Operations Center.</li><li>
Strong leadership and people management skills.</li><li>
Full understanding of SOC structure and process.</li><li>
Understanding of XDR.</li><li>
Experience working as a Cybersecurity Analyst.</li><li>
Customer service skills.</li><li>
In depth knowledge of common SOC tools such as:<ul><li>
SIEM</li><li>
SOAR</li><li>
EDR</li><li>
Email Security</li><li>
Threat Intelligence</li><li>
Vulnerability Scanner</li></ul></li></ul><ul><li>
In depth knowledge of security monitoring and analysis.</li><li>
In depth knowledge of core attack vectors such as:<ul><li>
Ransomware</li><li>
Business Email Compromise</li><li>
Phishing</li><li>
Botnet</li><li>
DDoS</li><li>
SQL Injection</li><li>
Supply-Chain Attacks</li><li>
Mobile Threats</li></ul></li></ul><ul><li>
Knowledge with cloud computing</li><li>
Programming skills preferred</li><li>
Experience troubleshooting in a technical environment, problem solving skills.</li><li>
Bachelor's/Master's degree in cybersecurity or relevant field is preferred.
</li><li>CEH, CompTIA Security+, and similar certifications or cybersecurity bootcamps are preferred.</li></ul><div></div><div><b>
What you&rsquo;ll get from us</b></div><div>
</div><div>
A team where you can voice your opinion, make an impact, and where you and your experience are valued. Internal mobility &ndash; there are opportunities for cross training and the ability to attain your next career step within Barracuda.
</div><div></div><ul><li>Equity, in the form of non-qualifying options</li><li>
High-quality health benefits</li><li>
Retirement Plan with employer match</li><li>
Career-growth opportunities</li><li>
Flexible Time Off and Paid Time Off benefits</li><li>
Volunteer opportunities</li></ul><div></div><div>
#LI-Hybrid<br>
</div><div>
Job ID 27-0027</div></div>

Manager, Cybersecurity Analysts

ARCO a Family of Construction Companies

<div>ABOUT YOU:
<div>
Do you have a passion for enabling business with secure, top-tier technology? Do you thrive in a fast paced and ever-evolving environment? Then we have the next career move for you! Who are we? We are ARCO, a Family of Construction Companies.</div><div></div><div><br>
The Services Manager, Cybersecurity Operations leads ARCO&rsquo;s day-to-day security monitoring, detection, and incident response activities. This role manages a team of Cybersecurity Analysts, oversees core security tools, and partners closely with Infrastructure, Applications, and GRC to maintain a strong, resilient security posture. This position is both strategic and hands-on, driving operational excellence, threat mitigation, and continuous improvement.</div><div></div><div><br>
As a senior member of the team, the role requires a strong ability to lead and mentor team members through the strategy directed by senior management. In addition to technical skills, the Services Manager is results-oriented and demonstrates effective problem-solving and communication skills.</div>
WHAT WE CAN OFFER YOU:
<p>
We are dedicated to the well-being of our associates and are proud to be consistently recognized as a Best Place to Work. Our compensation and benefits package not only supports our associates and their families but benefits local communities and communities around the world.
</p><ul><li>Industry-leading performance-based bonus program</li><li>
100% company funded retirement contributions</li><li>
Traditional and Roth 401k</li><li>
Tuition reimbursement for associates</li><li>
Scholarship for associates&rsquo; children up to $28,000 per child</li><li>
1-month paid sabbatical after every five years of employment, plus $5,000 for travel</li><li>
1-week paid volunteer leave each year</li><li>
100% charitable match</li><li>
Medical, dental, and vision insurance coverage
</li><li>100% paid 12-week maternity leave</li></ul><div></div><p><br>
At ARCO, our first core value is to treat people fairly and do the right thing. We are committed to building and sustaining a culture that supports diversity and inclusion. We are proud to be an equal opportunity employer, and all qualified applicants will receive consideration for employment.</p><p></p><p><br>
From recruiting, training, and hiring practices to selecting our subcontractors, we understand that diversity of all those involved in the construction process enhances our ability to deliver the best solutions to our customers. We hire the best and the brightest from across the country &ndash; constructing a team of experts in architecture, design, engineering, project management, and business services.</p>
A DAY IN THE LIFE:
<ul><li><div>Lead, mentor, and develop a team of Cybersecurity Analysts responsible for monitoring, triage, and incident response.</div></li><li><div>
Oversee daily SOC operations and ensure timely, effective handling of security alerts and requests.</div></li><li><div>
Automate repetitive tasks and implement process improvements to enhance efficiency.</div></li><li><div>
Maintain and update runbooks, SOPs, escalation workflows, and operational playbooks.</div></li><li><div>
Lead all security incident investigations, containment, and remediation activities.</div></li><li><div>
Conduct regular incident response exercises and postmortems, identifying root causes and tracking improvements.</div></li><li><div>
Stay current on emerging threats and assess ARCO&rsquo;s readiness to defend against them.</div></li><li><div>
Manage and optimize security tooling (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, threat intel platforms, etc.).</div></li><li><div>
Oversee vulnerability scanning, prioritization, and remediation with Infrastructure partners.</div></li><li><div>
Support patching, hardening, and secure configuration efforts across systems and networks.</div></li><li><div>
Guide engineering, deployment, and documentation of security tools.</div></li><li><div>
Support audits, evidence requests, and compliance requirements (NIST 800-171, CMMC, NIST CSF) in partnership with GRC.</div></li><li><div>
Develop metrics and dashboards that measure organizational risk and SOC performance.</div></li><li><div>
Communicate security risks and incident updates to leadership in clear business terms.</div></li><li><div>
Ensure required security awareness training and phishing simulations are delivered effectively.</div></li><li><div>
Participate in change management, project reviews, and technology planning discussions.</div></li><li><div>
Collaborate with Technology teams to identify security gaps and strengthen overall posture.</div></li></ul>
NECESSARY QUALIFICATIONS:
<ul><li><div>7-10 years of cybersecurity operations/engineering experience, including monitoring and incident response.</div></li><li><div>
Experience leading people, developing talent, and managing high-performing teams.</div></li><li><div>
Hands-on experience with core security technologies (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, vulnerability management, threat intel, SOAR).</div></li><li><div>
Strong communication skills with the ability to translate technical issues into business risk.</div></li><li><div>
Proven ability to drive measurable improvements in SOC performance.</div></li><li><div>
Strong organizational skills with the ability to prioritize and delegate.</div></li><li><div>
Experience with Azure or AWS environments.</div></li><li><div>
Familiarity with industry frameworks (NIST 800-171, CMMC, NIST CSF).</div></li><li><div>
Preferred certifications: CISSP, CISM, SANS/GIAC, CySA+, or similar.</div></li><li><div>
Travel: Up to 10%</div></li></ul>
LEGAL DISCLAIMER:
<div>
EOE, including disability/vets</div></div>

Services Manager, Cybersecurity Operations

Fidelity National Financial

<div>Overview:
<p><b>
POSITION OVERVIEW</b></p><p>
The Incident Response &amp; Threat Intelligence (IR/TI) Manager leads a globally distributed cyber defense team responsible for threat intelligence, incident response, digital forensics, and threat hunting across a large, complex enterprise environment. This role ensures the organization can rapidly detect, respond to, investigate, and learn from cyber threats while enabling executive‑level decision‑making during high‑impact incidents.</p><p></p><p><br>
The position partners closely with the SOC, Security Engineering, Privacy, Legal, Compliance, Technology, and Executive Leadership to reduce business risk and maintain cyber resilience at Fortune 500 scale.</p><p></p><p><b><br>
LOCATION</b></p><ul><li>
Jacksonville, FL preferred or 100% remote if not local.</li><li>
Global on‑call responsibility for high‑severity incidents.</li><li>
Limited travel for incident support, leadership meetings, and readiness exercises if not local to Jacksonville, FL</li></ul><p><b>
DUTIES &amp; RESPONSIBILITIES</b></p><p><b>
Global Team Leadership</b></p><ul><li>
Lead and continue to develop a geographically dispersed, follow‑the‑sun team across threat intelligence, digital forensics incident response, and threat hunting functions.</li><li>
Maintain operating models, on‑call rotations, escalation paths, and coverage aligned to global business needs.</li><li>
Coach senior analysts, build succession plans, and drive consistent performance, engagement, and retention.</li></ul><p><b>
Incident Response</b></p><ul><li>
Own enterprise incident response strategy, playbooks, and readiness activities, aligned to NIST and industry best practices.</li><li>
Serve as Incident Commander for high‑severity cyber incidents; coordinate technical response, executive communications, and cross‑functional decision‑making.</li><li>
Ensure effective containment, eradication, recovery, and post‑incident remediation, including executive‑level readouts and lessons learned.</li></ul><p><b>
Digital Forensics &amp; Investigations</b></p><ul><li>
Oversee forensic acquisition and analysis across endpoints, cloud, identity, SaaS, and network environments.</li><li>
Ensure defensible chain‑of‑custody processes and support legal, HR, privacy, and regulatory investigations as required.</li><li>
Maintain enterprise DFIR standards, tooling, and investigative quality.</li></ul><p><b>
Threat Intelligence</b></p><ul><li>
Lead strategic, operational, and tactical threat intelligence capabilities to inform detection, response, and risk prioritization.</li><li>
Translate intelligence into actionable outcomes, including detection engineering, threat hunting focus areas, and executive briefings.</li><li>
Integrate internal telemetry with external intelligence sources and trusted sharing communities.</li></ul><p><b>
Threat Hunting &amp; Detection Enablement</b></p><ul><li>
Drive hypothesis‑based threat hunting aligned to adversary behaviors and business‑critical risks.</li><li>
Partner with SOC and Detection Engineering teams to improve detection coverage, fidelity, and response speed.</li><li>
Sponsor purple team exercises to validate controls and surface gaps.</li></ul><p><b>
Technology &amp; Automation</b></p><ul><li>
Own the roadmap and effectiveness of DFIR, TI, and threat hunting tooling (e.g. TIP and forensics platforms).</li><li>
Increase automation and orchestration to accelerate investigation and response at enterprise scale.</li><li>
Collaborate with security engineering teams to embed intelligence‑led security improvements.</li></ul><p><b>
Governance, Risk, &amp; Executive Reporting</b></p><ul><li>
Ensure alignment with regulatory, legal, and internal governance requirements globally.</li><li>
Define, track, and report KPIs and KRIs (e.g., incident trends and threat hunting / intelligence reports) to executive and board‑level audiences.</li><li>
Translate technical risk into clear business impact and investment guidance.</li></ul><p><b>
MINIMUM REQUIREMENTS</b></p><ul><li>
8+ years in cybersecurity with 3+ years leading incident response and/or threat intelligence teams in large enterprises.</li><li>
Proven experience managing globally distributed teams and leading major cyber incidents.</li><li>
Strong hands‑on understanding of DFIR, threat intelligence, and threat hunting processes.</li><li>
Experience with a wide breadth of enterprise security tooling.</li><li>
Experience working cross‑functionally with Legal, Privacy, Compliance, and Executive Leadership.</li><li>
Exceptional written and verbal communication skills, including executive‑level briefings.</li></ul><p><b>
PREFERRED EXPERIENCE
</b></p><ul><li>Experience in a Fortune 500 or similarly complex, regulated environment.</li><li>
Certifications such as GCIH, GCFA, GCED, CISSP, CISM, or equivalent.</li><li>
Familiarity with MITRE ATT&amp;CK, NIST 800‑61, and/or SOC CMM Framework</li></ul></div>

Incident Response & Threat Intelligence Manager

Emergency 24 Inc

<div><p><b>Job Title: Alarm Monitoring Center Shift Manager</b></p><p><b>
Department:</b> Operations<br>
<b>Reports To:</b> Senior Operations Manager / Operations Director<br>
<b>Location:</b> Des Plaines, IL<br>
<b>Employment Type:</b> Full-Time (Shift-Based, 24/7 Operations)</p><p><b>
Position Summary</b></p><p>
The <b>Alarm Monitoring Center Shift Manager</b> is responsible for leading and supervising monitoring center staff during assigned shifts to ensure the continuous, efficient, and accurate monitoring of alarms, emergency signals, and customer service requests. This role ensures operational excellence, adherence to company procedures, and high-quality service delivery in a 24/7 mission-critical environment.</p><p><b>
Key Responsibilities</b></p><p><b>
1. Shift Leadership &amp; Operations</b></p><ul><li>
Supervise daily monitoring center operations during the assigned shift.</li><li>
Oversee real-time alarm handling, dispatching, and escalation processes to ensure timely responses.</li><li>
Maintain shift logs, activity reports, and performance metrics.</li><li>
Ensure compliance with company policies, industry standards, and regulatory requirements.</li><li>
Manage workload distribution and ensure proper staffing levels.</li></ul><p><b>
2. Staff Management &amp; Development</b></p><ul><li>
Lead, coach, and motivate monitoring center operators to meet performance and quality standards.</li><li>
Conduct training sessions and performance feedback discussions.</li><li>
Support the mentoring and continued training of new operators.</li><li>
Promote a positive and professional work environment.</li></ul><p><b>
3. Incident Response &amp; Escalation</b></p><ul><li>
Serve as the point of contact for critical incidents, customer escalations, and system alerts.</li><li>
Ensure accurate documentation and post-incident analysis.</li></ul><p><b>
4. Systems &amp; Process Management</b></p><ul><li>
Monitor the performance of alarm monitoring systems and report technical issues promptly.</li><li>
Ensure operators follow standard operating procedures (SOPs) and escalation protocols.</li></ul><p><b>
5. Reporting &amp; Communication</b></p><ul><li>
Prepare and submit shift reports to senior management.</li><li>
Communicate operational updates and handovers between shifts.</li><li>
Participate in regular operations meetings.</li></ul><p><b>
Working Conditions</b></p><ul><li>
24/7 operation environment &mdash; must be available for rotating shifts, weekends, and holidays.</li><li>
Fast-paced, high-stress, and technology-driven workspace.</li><li>
May involve extended periods of sitting and monitoring multiple screens.</li></ul><p><b>
Performance Indicators</b></p><ul><li>
Alarm response times and accuracy.</li><li>
Staff performance and morale.</li><li>
Compliance with SOPs and regulatory requirements.</li><li>
Customer satisfaction and incident resolution quality.</li></ul><p>
</p><p><b>Qualifications</b></p><p><b>
Education &amp; Experience</b></p><ul><li>
High school diploma or equivalent required; associate or bachelor&rsquo;s degree in security management, criminal justice, or related field preferred.</li><li>
Minimum 3&ndash;5 years of experience in an alarm monitoring center, dispatch center, or similar operations environment.</li><li>
At least 1&ndash;2 years in a supervisory or leadership role preferred.</li></ul><p>
</p><p><b>Skills &amp; Competencies</b></p><ul><li>
Strong leadership and team management skills.</li><li>
Excellent communication and decision-making abilities.</li><li>
Ability to work under pressure and manage multiple priorities.</li><li>
Proficiency in alarm monitoring systems and dispatch software.</li><li>
Detail-oriented, reliable, and adaptable to shift work.</li></ul><p>
</p><p><b>Certifications (Preferred but Not Required)</b></p><ul><li>
PERC (Permanent Employee Registration Card) or ability to get one</li><li>
Additional Security License (required by State of Oregon)</li></ul></div>

Operations Manager

Search 10000+ Security operations center manager jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 security operations center manager jobs Near Me

Cybersecurity Manager

SOC Manager (IT Cyber Security Manager 2)

Manager, Cybersecurity Analysts

Manager, Cybersecurity Analysts

Services Manager, Cybersecurity Operations

Incident Response & Threat Intelligence Manager

Operations Manager