Senior Manager of Cybersecurity Operations

Description

Job Summary:

The Senior Manager of Security Operations, reporting into the CISO, leads a team of security engineers that aligns with business strategy and delivers cybersecurity expertise. Under the supervision of the Head of Security Operations, the information security engineers work closely with IT, software engineering and corporate security teams. The Senior Manager of Security Operations provides a holistic focus across infrastructure, application security, vulnerability management and third-party partnerships and dependencies.

Across collaborative teams, the Senior Manager of Security Operations defines, documents, maintains, and enforces the practices and policies that are the pillars of a security operations and product security program.

The Senior Manager of Security Operations is a highly visible role interfacing with multiple teams. When security findings are discovered, the Senior Manager of Security Operations proactively communicates with technical and business leadership teams to ensure a focus on risk mitigation. Successful candidates in this role possess technical skills and business acumen and can effectively communicate complex topics. The Senior Manager of Security Operations understands how attackers think and their motives, while at the same time understanding corporate business objectives.

The Senior Manager of Security Operations prioritizes team members to help them grow personally and professionally.

Job Responsibility:

• Lead team of security engineers responsible for security operations including vulnerability management, monitoring, incident response and security tooling.
• Provide leadership and direction with security practices and methodologies in information security.
• Develop metrics and scorecards to measure risk to the organization, as well as effectiveness and efficiency of security operations.
• Develop a short- and long-term security operations roadmap to improve processes and agility.
• Remove friction from complex manual processes by automation and outsourcing.
• Promote a positive security culture focused on collaboration and creating strong relationships.
• Adopt cybersecurity frameworks, define/maintain policies and standards, and enforce them across all teams.
• Plan and execute regular incident response and postmortem exercises, with a focus on creating measurable benchmarks to show progress (or deficiencies requiring additional attention).
• Serve as a central point of contact for cybersecurity requirements, initiatives and escalations.
• Enforce security standards and implementation configurations, as well as common security frameworks.
• Collaborate cross functionally with IT, engineering, and other leadership on information security.
• Be accountable to keep information security initiatives within annual approved budgets.

Required Qualification:

• Bachelor’s degree preferred in computer science, information assurance, engineering or related field. Graduate business school degree highly desired.
• Ideally 8+ years with a combination of one or more in cybersecurity, application security or engineering.
• Experience managing people, including technical staff.
• Experience managing an on-call operational environment.
• Experience working in environments in Windows and Linux.
• Experience working in Cloud environments: AWS or other cloud environments.
• Experience driving measurable improvement in monitoring and response capabilities at scale.
• Experience managing security information and event management (SIEM) systems, threat intelligence platforms, security automation and orchestration solutions, data loss prevention (DLP) and other network and system monitoring tools.
• Proficient in security operations, APIs, vulnerability management, and threat modeling.
• Experience managing an annual cybersecurity budget with expenses for internally developed, commercial and third-party tools.
• This position requires you to have or obtain a government security clearance. Security clearances may only be granted to U.S. citizens.

Preferred Qualification:

• Preferably one or more certifications CISSP, CSSLP, CISM, CRISC.

Location:

This position is hybrid and can be located out of one of the following Mercury Systems…