Security Operations Manager.info Tech - Security

Position: 1000000558.SECURITY OPERATIONS MANAGER.INFO TECH - SECURITY
Provides leadership and coordination of Dallas County's Security Operations Center (SOC) ensuring comprehensive threat detection, response, and operational security across the enterprise. Oversees day-to-day security operational functions, managing security incidents, response efforts, and aligning security operations with County policies and regulatory requirements. Ensures that monitoring tools, detection strategies, and incident handling processes are optimized and continuously improved while working across departments, technologies, and teams to ensure Dallas County's digital infrastructure is continuously protected and resilient.

Management Scope:
Manages exempt staff.

Builds and leads day-to-day security operations, including the management and integration of Dallas County's Security Operations Center (SOC), ensuring SLA delivery and effective execution of threat detection, monitoring, and incident response activities. Manages and prioritizes incoming security incidents and tickets, ensuring timely triage, assignment, resolution, and escalation as needed in alignment with County policies and risk thresholds. Develops and maintains operational documentation such as standard operating procedures, incident response playbooks, and detection workflows to support consistent and effective operations.

Serves as the lead for coordinating response efforts during cybersecurity incidents, including incident tracking, status updates, and post-incident reviews. Ensures integration and optimization of security technologies (e.g., SIEM, EDR, firewalls, identity systems) to support real-time monitoring and threat visibility. Collaborates with internal teams, vendors, and operational stakeholders to enhance detection capabilities using contextual intelligence and known threat indicators. Provides status updates, metrics, and recommendations to the Chief Information Security Officer (CISO) and Chief Privacy Officer (CPO) to support strategic decision-making and continuous improvement.

Performs other duties as assigned.

Education, Experience and Training:
Education and experience equivalent to a Bachelor's degree from an accredited college or university in Bachelor's degree in Information Security, Computer Science, Information Technology, or in a job-related field of study. Six (6) years of work-related experience in cybersecurity, including three (3) years supervisory experience. Certifications (Preferred):
• CISSP, SANS GCIA, or other relevant professional certifications

Special Requirements /Knowledge, Skills & Abilities:
• Deep understanding of threat detection, incident response, and security monitoring practices, including application of indicators of compromise (IOCs) and threat intelligence.
• Ability to triage, prioritize, and manage incoming security alerts and incident tickets, with ability to improve workflows and tool integrations as necessary for operational performance.
• Proficiency in developing and implementing incident response plans, playbooks, and operational procedures aligned with best practices and compliance standards.
• Analytical and critical thinking skills for assessing evolving threats and identifying opportunities for improving detection and response capabilities.
• Skilled in coordinating internal and external teams to ensure timely and effective resolution of security events.
• Ability to maintain composure and lead effectively during crisis scenarios, including real-time decision-making, incident response, and post-incident analysis.
• Knowledge of regulatory frameworks and compliance requirements relevant to government environments (e.g., CJIS, HIPAA, NIST).
• Strong expertise in cybersecurity operations, incident coordination and response, and communication across technical and business units is essential.
• Extensive experience in cybersecurity operations, including threat detection, incident response, and operational coordination.
• Demonstrated ability to lead day-to-day security operations and manage security events through their full lifecycle.
• Demonstrated experience managing and integrating enterprise security tools and technologies such as security…