IT Cybersecurity Operations Manager

To make electronics, you need chips, wafers, transistors, reticles, and... To make these, you must see, test and manufacture them at scale—faster and better than ever before. That's where KLA comes in. Whether you're early in your career or an experienced professional, you'll solve complex challenges, work alongside brilliant minds and help shape the future of technology.

Group/DivisionKLA's IT group supports business growth and productivity by connecting people, process and technology around the world. We work to improve the technology that drives our business to thrive and focus on empowering employee use of technology. This integrated approach to customer service, creativity and technological excellence enhances employee productivity, business analytics and process excellence.

What You'll DoIn this role, you will play a key part in advancing business priorities by delivering high-impact work across your area of expertise.

We are seeking a, IT Cybersecurity Operations Manager to lead the strategy, deployment, and operations of endpoint security technologies across the enterprise. This role owns the endpoint security toolset end-to-end — from architecture and implementation to daily operations and continuous improvement — while managing a team of engineers and partnering closely with SOC, IT, and infrastructure teams. This role combines hands-on technical leadership with people and program management, ensuring endpoints are protected against modern threats while maintaining usability and business productivity.

Endpoint Security & Tools Ownership Own and manage enterprise endpoint security platforms including EDR/XDR, endpoint protection, device control, DLP and endpoint privilege management agents.

Lead the design, deployment, configuration, and optimization of endpoint security tools across Windows, macOS, and Linux environments.

Ensure endpoint security tools integrate effectively with SIEM, SOAR, SOC workflows, and identity platforms.

Define endpoint hardening standards, baselines, and security policies.

Operations & Incident Response Oversee endpoint-related security incidents, investigations, and remediation efforts.

Partner with SOC teams to improve detection, response, and automation related to endpoint threats.

Manage tool health, agent performance, upgrades, and lifecycle management.

Drive root cause analysis and continuous improvement following incidents.

People & Program Management Lead, mentor, and develop a team of endpoint security engineers.

Prioritize work, manage roadmaps, and track delivery of endpoint security initiatives.

Establish operational processes, documentation, and KPIs for endpoint security tooling.

Manage vendor relationships, licensing, and renewals.

Strategy & Stakeholder Collaboration Define the security agents roadmap aligned with Zero Trust and defense-in-depth strategies.

Partner with Cybersecurity, IT operations, desktop engineering, IAM, and compliance teams to balance security and user experience.

Evaluate new endpoint security technologies and lead POCs and rollouts.

Preferred Qualifications Experience integrating endpoint tools with SIEM/SOAR platforms (Elastic, Google Sec Ops, etc.).Familiarity with MDM/MAM solutions (Intune, JAMF, Workspace ONE).Experience in regulated or large enterprise environments.

Certifications such as CISSP, GCED, GCIA, Sentinel One, Proofpoint, or Cyber Ark certifications.

Minimum Qualifications

Required Qualifications Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience).10+ years of experience in endpoint security or endpoint engineering, with 4+ years in a lead or management role.

Strong hands-on experience with one or more endpoint security platforms such as:

EDR :
Sentinel One, Crowd…