Cybersecurity Operations Manager
Save this job and keep your search organized
Create a free account to save jobs, create alerts and return to this listing from your dashboard.
By continuing, you agree to our Terms & Privacy Policy.
US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other
Job Title: Cybersecurity Operations ManagerLocation: Charlotte, NC
Duration: 12 Months + Extension
Bill Rate: $78/hour
Job Type: W-2, 1099, C2C
Client: To Be Discussed Later
Work Authorization: US-Citizen, H-1B, OPT-EAD, GC-EAD
JobDescription:
We are seeking an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) to serve as the onsite liaison among ICW Group, CrowdStrike, and Atos. This 12-month role will lead operational oversight of CrowdStrike services, including implementation, adoption, governance, and daily coordination.
The resource will coordinate implementation through steady-state support, serving as the central contact for Falcon Complete, CTEM, Falcon Guardian / AIDR, service reviews, and escalations.
Key Responsibilities :
- Act as the primary operational liaison for Falcon Complete service matters.
- Coordinate critical-incident communications, follow-up actions, and closure.
- Ensure recommendations are assigned, tracked, and resolved by the appropriate ICW or Atos team.
- Coordinate implementation workstreams, dependencies, risks, and delivery with Atos as the GSI.
- Maintain accountability through documented owners, due dates, actions, and escalations.
- Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams.
- Lead day-to-day administration and operating processes for CTEM and Falcon Guardian / AIDR.
- Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement.
- Integrate findings into ICW workflows and partner with asset owners to reduce risk.
- Lead weekly operational and monthly service reviews.
- Maintain a RAID log covering risks, assumptions, issues, and dependencies.
- Create executive dashboards and concise status reporting.
- Maintain the roadmap, RACI, escalation model, and transition plan.
- Implementation oversight, deployment coordination, and operational transition plan.
- Security-operations governance framework, cadence, RACI, and escalation model.
- Executive dashboards, monthly service reviews, and action tracking.
- Incident-escalation and stakeholder-communication process.
- CTEM remediation tracking and Falcon Guardian / AIDR operating procedures.
- RAID log and remediation-status reporting.
- Knowledge-transfer and operational-readiness documentation.
Required Experience and Qualifications :
- 12+ years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services.
- 7+ years leading enterprise SOC, MDR, incident-response, or managed-security programs.
- 4+ years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian / AIDR.
- Experience in a senior client-facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager.
- Proven coordination across customers, cybersecurity vendors, and global systems integrators during implementation and operations.
- Experience with critical escalations, governance, executive reporting, service reviews, and cross-functional remediation.
- Ability to work onsite in San Diego for the 12-month assignment.
- Strong communication skills and the ability to translate technical issues into business impact and clear actions.
Preferred Technical Experience :
- CrowdStrike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Guardian / AIDR, Falcon Next-Gen SIEM, and Falcon OverWatch.
- Security incident response, threat hunting, detection engineering, vulnerability and exposure management, and SOC operations.
- ServiceNow and Jira workflows; Microsoft Intune, SCCM, BigFix, or comparable endpoint-deployment tools.
- Identity platforms such as Microsoft Entra ID, Active Directory, and Okta.
- Cloud environments including Microsoft Azure,