POSITION SUMMARYUnder minimum direction, the Security Operations Team Lead is responsible for and manages the day-to-day activities of McCarthy's Security Operations team. This role provides technical guidance, coordinates alert and ticket response, and serves as the first escalation point for security operations issues. The Team Lead partners with Security Engineering, managed security providers, end users and other technology teams to maintain effective detection, response, and operational readiness. This position reports to the Security Manager.
RESPONSIBILITIES - Lead and prioritize the daily work and projects of the Security Operations team.
- Serve as the first escalation point for security alerts, tickets, investigations, and operational issues.
- Coach, develop, and support Security Operations Engineers.
- Provide hands-on assistance with alert triage, investigations, incident response, threat hunting, and high-priority operational tasks.
- Oversee day-to-day coordination, relationship, and expectations with the managed detection and response (MDR) providers, including alert review, escalations, tuning, and service quality.
- Lead and/or participate in incident response activities (Detect, Respond, Recover).
- Help maintain and improve security operations playbooks, procedures, escalation paths, and documentation.
- Participate in sprint planning, backlog prioritization, and work tracking.
- Participate in the security operations on-call schedule.
- Support security assessments, audits, vulnerability remediation, policy development, and continuous improvement initiatives.
- Create and track relevant metrics for continuous improvement.
- Conduct third party security / vendor reviews.
- Contribute to improving the Cyber Safety culture at McCarthy, including phishing campaigns and security awareness training.
QUALIFICATIONS- Bachelor's Degree in related field preferred.
- Minimum 3 years of experience in cybersecurity, security operations, or a related field.
- Minimum 3 years of people / project management preferred.
- Experience leading, mentoring, or coordinating technical personnel.
- Experience with security monitoring, endpoint protection, identity security, incident response, threat hunting, or related disciplines.
- Experience working with a managed security or managed detection and response provider preferred.
- Support experience in operations and high ticket / call volume.
- Hands on experience and in-depth knowledge of enterprise IT infrastructure, endpoints, identity, networks, applications, and cloud technologies.
Skills and Competencies - Strong written and verbal communication skills.
- Ability to coach and develop security operations engineers.
- Strong problem-solving, analytical, organizational, and decision-making skills.
- Ability to remain calm and effective during high-priority events or incidents.
- Ability to collaborate with technical and non-technical stakeholders at all levels.
- Ability to work independently, meet deadlines, and maintain a strong internal client experience.
- Commitment to documentation, operational discipline, and continuous improvement.
- Develop and provide training to educate users regarding security best practices.
