Manager-Cybersecurity

Manager-Cybersecurity

We are seeking a hands-on Manager for our Cybersecurity team. You'll lead the organization's cybersecurity capabilities, including incident response, threat detection, threat hunting, digital forensics, vulnerability remediation coordination, and security technology operations.

This role provides leadership for cybersecurity engineers and analysts while remaining technically engaged in major investigations, strategic security initiatives, and security architecture decisions. The manager will drive the maturity of the organization's cybersecurity operations by improving detection capabilities, implementing new security technologies, reducing operational risk, and strengthening response readiness.

This is a true player-coach role, ideal for a hands-on cybersecurity leader with strong experience across DFIR, Security Operations, threat detection, and security engineering.

Primary responsibilities include:

Leadership & Team Management

• Lead a team of cybersecurity engineers, analysts, and incident responders.
• Establish team goals, KPIs, and development plans.
• Conduct performance management, coaching, mentoring, and recruiting activities.
• Manage operational priorities and incident response readiness.
• Foster a culture of accountability, continuous improvement, and operational excellence.

Security Operations

• Oversee security monitoring and incident response activities.
• Ensure timely triage, investigation, escalation, and remediation of security events.
• Establish and improve operational processes and service metrics.
• Maintain incident response plans, playbooks, and escalation procedures.

Digital Forensics & Incident Response

• Lead response efforts for high-severity cybersecurity incidents.
• Direct forensic investigations involving endpoints, cloud resources, identities, and network infrastructure.
• Coordinate cross-functional response efforts with infrastructure, legal, HR, and executive leadership.
• Deliver after-action reports and lessons learned.

Security Engineering & Program Maturity

• Lead evaluation and implementation of cybersecurity technologies.
• Drive improvements in:
• XDR
• SIEM
• Threat Intelligence
• SOAR
• Vulnerability Management
• Identity Security
• Cloud Security
• Develop and execute security roadmaps aligned with organizational objectives.
• Ensure security controls support Zero Trust and defense-in-depth strategies.

Risk & Governance Support

• Support audits and compliance initiatives.
• Assist with risk assessments and remediation planning.
• Provide reporting and metrics to leadership.
• Support regulatory and cybersecurity framework requirements.

Required Qualifications

• Bachelor's degree or equivalent experience.
• 3–5 years leading cybersecurity teams.
• Demonstrated experience with:
• Incident Response
• DFIR
• Threat Hunting
• Security Operations
• Security Engineering
• Security Program Development
• Related certification(s) preferred

Berry Appleman & Leiden is an Equal Opportunity Employer. It is the policy of BAL to ensure an equal employment opportunity without discrimination or harassment on the basis of race, color, national origin, religion, gender, gender identity or expression, age, disability, alienage or citizenship status, marital status, creed, genetic predisposition or carrier status, sexual orientation or any other characteristic protected by law.

BAL prohibits and will not tolerate any such discrimination or harassment.