Manager, Security Engineering; MSSP Services; Remote

About us:

At Echelon Risk + Cyber, we believe in defending basic human rights to security and privacy. We're looking for a hands-on Manager, Security Engineering to lead our team of Senior Security Engineers within our MSSP Services. Our next team member will be ready to roll up their sleeves and identify opportunities for our clients and for Echelon internally with unquestioned integrity.

This team member will be passionate about cybersecurity and ready to use their knowledge to be an Entrepreneurial Problem Solver and work alongside their Echelon team members to build creative solutions.

At Echelon, we believe learning never stops. You will have the opportunity to engage with systems that are at the cutting edge of technology and team members that will challenge you with meaningful work. We allow our team members to build from the ground up and make an impact across the organization.

• Directly manage a team of Senior Security Engineers, own their performance management, career development, and day-to-day support.
• Set and monitor utilization, quality, and ticket/engagement-health targets across the team; step in on at-risk client environments.
• Review technical work before it reaches clients, security configurations, assessment findings, remediation plans, and IR playbooks, to ensure consistency and quality.
• Serve as the escalation point for complex technical issues, client conflicts, or ambiguous scope that engineers surface.
• Run regular 1:1s, team meetings, and technical case reviews; build a culture of peer learning and shared standards across the team.
• Lead hiring, onboarding, and ramp planning for new Senior Security Engineers as the team grows.
• Identify skill gaps across the team and build/deliver internal training, runbooks, and technical playbooks to close them.
• Own staffing and capacity planning: matching engineer bandwidth and expertise to client demand in partnership with delivery leadership.
• Conduct on-call rotation planning and ensure coverage for incident response across the team.

• Carry your own portfolio of client engagements, implementing and enforcing security policies and procedures based on industry standards.

• Conduct security assessments, audits, and compliance reviews for client environments.
• Design and implement secure cloud solutions (Azure and AWS) and manage Cloud Security Posture Management (CSPM) tooling.
• Ensure the security of SaaS platforms, including email, file sharing, and third-party applications.
• Configure and manage security controls for servers and endpoints, including endpoint protection deployment and management.
• Implement security policies for Mobile Device Management (MDM).
• Conduct vulnerability scans and penetration tests, developing remediation plans for identified issues.
• Implement and manage IAM solutions, including SSO and privileged access management (PAM); ensure proper user provisioning and access controls.
• Lead technical implementations of data protection services, including Data Loss Prevention (DLP) solutions.
• Work closely with clients to understand their security needs and provide tailored solutions.

• Oversee implementation and management of SIEM, MDR, IDS/IPS across client accounts managed by your team.
• Configure and manage network security policies across perimeter and internal network equipment, including firewalls and wireless access points.
• Apply and enforce security configuration benchmarks (e.g., CIS, NIST) across your team's engagements.
• Participate in and oversee incident response planning, tabletop exercises, and the development of IR plans and playbooks.
• Review and ensure backup, redundancy, and replication solutions meet availability and recovery best practices, including oversight of recovery testing.
• Ensure compliance with regulatory requirements and industry standards across client environments.

• Collaborate with cross-functional teams to ensure security is integrated into all aspects of client IT infrastructure.
• Develop and maintain technical security standards and operational procedures for the MSSP practice.
• Assist with the implementation and configuration of security awareness training programs and solutions.
• Contribute to the evolution of Echelon's security engineering methodology, tooling standards, and delivery templates.
• Partner with sales and delivery leadership on scoping…