Cyber Security Operations Senior Manager

Location:

Amarillo, TX - Pantex Plant

Job Title:

Cyber Security Operations Senior Manager

Career Level From: Senior Manager

Career Level To: Senior Manager

Organization: Cyber Operations )

Job Specialty:
Cyber Security

The Cyber Security Operations Senior Manager serves as the operational commander, technical mentor, and strategic leader for the Cyber Security Operations team. Reporting directly to the Chief Information Security Officer (CISO),this position is pivotal in safeguarding critical national security infrastructure while building and scaling a resilient,high-capability cyber defense organization.

This is a "player-coach" leadership role designed for an operational cyber practitioner who is equally passionate about modern defensive technical strategy—such as Zero Trust Architecture (ZTA), Defense-in-Depth (DiD), threat hunting, and proactive detection engineering—and developing people. As manager, you will serve as a force multiplier: elevating the technical depth of the existing team, fostering a continuous learning environment, and translating complex adversary threat intelligence into actionable operational defenses.

You will oversee Defensive Cyber Operations (DCO), Cyber Security Engineering, and Incident Response (CSIRT) activities in close collaboration with the Network Operations Center/Security Operations Center (NOC/SOC),Formal Authorization and Risk Management team, and Department of Energy (DOE)/National Nuclear Security Administration (NNSA) stakeholders to outpace evolving threats.

• Build Team Depth & Capability:
  Serve as a dedicated mentor and technical coach to junior, mid-level, andsenior analysts; design clear skill-development pathways, cross-training initiatives, and knowledge-sharing frameworks to expand the team's operational bench depth.
• Cultivate an Operational Culture:
  Lead, empower, and inspire a service-oriented cyber operations team,fostering an environment of curiosity, technical rigor, open communication, and shared accountability.
• Resource & Workload Management:
  Plan, prioritize, and coordinate staff assignments across operational shifts, incident response tasks, and long-term security engineering projects to maintain team health and operational readiness.

• Proactive Threat Hunting:
  Lead the strategy for active threat hunting using the MITRE ATT&CK framework to detect living-off-the-land (LotL) techniques, covert persistence, and anomalous activity before impact occurs.
• Incident Response Oversight:
  Oversee all Cyber Security Incident Response (CSIRT) activities(collaborating with delegated incident leads), acting as the senior operational escalation authority and crisis commander during high-severity cyber events.
• Playbook & Detection Modernization:
  Drive continuous improvement of incident playbooks, automated response workflows, and Security Information and Event Management (SIEM)/Extended Detection and Response (XDR) detection rules (specifically within Splunk) to maximize analyst efficiency and reduce time-to-detect/time-to-respond.

• Zero Trust & Hardening Strategy:
  Guide security engineering efforts to transition legacy network postures toward Zero Trust Architecture (ZTA) principles, enhanced micro-segmentation, and identity-bound access controls.
• Vulnerability & Exposure Management:
  Oversee enterprise vulnerability scanning, risk prioritization (e.g.,United States Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities(KEVs), and mitigation strategies in partnership with Information Technology (IT) and Network Operations.
• Threat…