Cybersecurity Operations Manager

The Cybersecurity Operations Manager and Technical Account Manager role provides onsite service leadership for Crowd Strike operations, serving as the liaison among ICW Group, Crowd Strike, and Atos. Based in Charlotte, NC, this position focuses on operational oversight, governance, service reviews, and incident escalation processes for Falcon Complete and related Falcon modules.

Own day-to-day operational coordination for Falcon Complete service matters, alongside administration and operating processes for CTEM and Falcon Guardian / AIDR
. The role manages implementation and adoption, governance cadence, exposure management workflows, escalation coordination, and executive reporting.

• Serve as the primary operational liaison for Falcon Complete service matters.
• Coordinate critical-incident communications, follow-up actions, and closure.
• Ensure recommendations are assigned, tracked, and resolved by the appropriate ICW or Atos team.
• Coordinate implementation work streams, dependencies, risks, and delivery with Atos as the GSI.
• Maintain accountability using documented owners, due dates, actions, and escalation paths.
• Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams.
• Lead day-to-day administration and operating processes for CTEM and Falcon Guardian / AIDR.
• Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement.
• Integrate findings into ICW workflows and coordinate with asset owners to reduce risk.
• Lead weekly operational and monthly service reviews.
• Maintain a RAID log covering risks, assumptions, issues, and dependencies.
• Create executive dashboards and provide concise status reporting.
• Maintain the roadmap, RACI, escalation model, and transition plan.
• Provide implementation oversight, deployment coordination, and operational transition planning.
• Support security-operations governance framework, cadence, RACI, and escalation model.
• Coordinate incident escalation and stakeholder communication processes.
• Maintain CTEM remediation tracking and Falcon Guardian / AIDR operating procedures.
• Support RAID log ownership and remediation-status reporting.
• Drive knowledge transfer and operational readiness documentation.

• 12+ years of cybersecurity experience across security operations, incident response, threat detection, exposure management, or managed security services.
• 7+ years leading enterprise SOC, MDR, incident-response, or managed-security programs.
• 4+ years of operational experience with Crowd Strike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian / AIDR.
• Experience in a senior client-facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager.
• Proven ability to coordinate with customers, cybersecurity vendors, and global systems integrators during implementation and operations.
• Experience managing critical escalations, governance, executive reporting, service reviews, and cross-functional remediation.
• Ability to work onsite for the 12-month assignment in San Diego.
• Strong communication skills, including translating technical issues into business impact and clear actions.

• Hands-on experience with Crowd Strike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Guardian / AIDR, Falcon Next-Gen SIEM, and Falcon Over Watch.
• Security incident response, threat hunting, detection engineering, vulnerability and exposure management, and SOC operations.
• Experience with Service Now and Jira workflows;
  Microsoft Intune, SCCM, Big Fix, or similar endpoint deployment tools.
• Identity platform experience including Microsoft Entra , Active Directory, and Okta.
• Familiarity with Microsoft Azure, AWS, or Google Cloud environments.
• Working knowledge of NIST Cybersecurity Framework, MITRE ATT&CK, CIS Controls, ISO/IEC 27001, and ITIL.

• CISSP - Certified Information Systems Security Professional
• CISM - Certified Information Security Manager
• CCSP - Certified Cloud Security Professional
• GIAC certifications such as GCIH (Incident Handler), GCED (Enterprise Defender), or comparable GIAC credentials
• CompTIA Security+ for candidates whose broader experience demonstrates senior-level capability

• Crowd Strike Certified Falcon Administrator (CCFA)
• Crowd Strike Certified Falcon Responder…