Job SummaryThe Security Operations Manager is a hands-on technical leader responsible for operating, optimizing, and coordinating the organization's core security tools, controls, and service providers. This role focuses on security program execution and operational effectiveness, not people management, and plays a key role within the CISO organization.
This position requires a strong blend of technical depth, vendor coordination, and incident response execution, with an emphasis on protecting both corporate and hotel IT environments. The ideal candidate is a proactive problem-solver who thrives in fast-moving environments, adapts easily to changing priorities, and collaborates effectively across security, IT, and third-party teams to reduce risk and strengthen the organization's security posture.
QUALIFICATIONS: - Bachelors degree in Information Security or related field.
- 4-8 years of hands-on cybersecurity experience, with direct exposure to EDR/XDR, SIEM, PAM, email security, and security monitoring.
- Strong incident response and threat detection expertise, including assessing complex issues and delivering practical mitigation strategies.
- Broad technical foundation, including cloud security (Azure & AWS), network security (VPNs, IDS/IPS), and modern security tools and controls.
- Automation and analysis skills, including scripting (PowerShell, Python), KQL/SPL query writing, and RPA to improve security operations.
- Effective communicator and collaborator, with experience working across teams and with third-party vendors in a managed security services model; relevant industry certifications preferred.
JOB RESPONSIBILITIES:Threat Detection, Monitoring & Incident Response - Manage and enhance EDR capabilities to detect, investigate, and respond to security threats enterprise-wide.
- Leverage SIEM, firewalls, EDR/XDR, and email security data to maintain visibility and identify threats, vulnerabilities, and trends through real-time and scheduled reporting.
- Monitor and investigate email-based threats (including BEC and ATO) using trace analysis while optimizing email security tools.
- Support incident response activities, including investigation, containment, eradication, recovery, root cause analysis, and playbook maintenance.
Security Operations, Governance & Compliance - Establish and enforce data governance, quality standards, and security controls in partnership with the CISO and Governance, Risk, and Compliance (GRC) team.
- Drive accountability for the timely detection, escalation, and resolution of security events.
- Ensure adherence to organizational security policies through continuous operational oversight and control execution.
Access Control, Infrastructure & Vendor Collaboration - Maintain and enhance Privileged Access Management (PAM) systems to enforce secure access to critical infrastructure and sensitive data.
- Regularly monitor and audit firewall configurations and logs to ensure alignment with security standards and policies.
- Act as the primary liaison to a third-party SIEM provider, coordinating effective monitoring, alerting, and log management.
After an initial waiting period, those hired into full time positions are eligible for a competitive benefits package that includes the following:
- Now offering Daily Pay! Ask your Recruiter for more details
- Medical, Dental, and Vision Coverage
- Short-Term and Long-Term Disability Income
- Term Life and AD&D Insurance
- Paid Time Off
- Employee Assistance Program
- 401k Retirement Plan
Application deadline for Colorado positions:
