The Senior Manager, Cyber Defense Operations leads the organization's cyber defense capability, accountable for identifying, containing, and recovering from cyber threats at speed and scale. This role holds strategic ownership across six sub-capabilities-including Incident Response, Threat Management, and Vulnerability Remediation-ensuring operations are intelligence-driven, metrics-guided, and continuously maturing.
What you will do:SOC Leadership & Defense Strategy- Own enterprise cyber defense strategy across detection, threat management, IR, vulnerability, patching, and reporting.
- Lead and mature the SOC by driving 24/7 Endpoint Detection, Logging & Monitoring (SIEM) coverage, and detection engineering.
- Define SOC KPIs, MTTD/MTTR targets, and the Reporting & Continuous Improvement framework for the function.
Threat Management & Incident Response- Operationalize threat intelligence into detection use cases, hunting, and proactive defense.
- Own the Incident Response capability, including crisis management, major incident leadership, and executive communications.
- Build strategic MSSP and ISAC partnerships, representing the organization in threat intelligence sharing communities.
Governance & Vulnerability Remediation- Govern Vulnerability Remediation and Patch & Configuration Management through SLA accountability and risk-based prioritization.
Tools & Technologies:- SIEM: Microsoft Sentinel or Splunk at enterprise scale for architecture, ingestion, and detection engineering.
- EDR/XDR: CrowdStrike, Microsoft Defender, or equivalent for policy management and investigations.
- Vulnerability Management: Tenable, Qualys, or equivalent for risk-based prioritization.
- Frameworks: Deep understanding of MITRE ATT&CK, attacker TTPs, and kill chain methodology.
What you bring:- Experience: 12+ years in cybersecurity with 5+ years leading SOC or cyber defense operations at an enterprise scale.
- Certification: CISSP or CISM required; GCIA, GCIH, or GCFE is highly preferred.
- Communication: Exceptional ability to communicate complex threat scenarios and defense posture to executive and board audiences.
- Leadership: Proven leader in building and scaling high-performing SOC teams and driving measurable improvement in MTTD/MTTR.
