- Atlanta, Georgia, United States
- Full-time · Manager
- 3+ years
Lead the operational program that keeps the firm's Cybersecurity Operations team running at its best.
Responsibilities
- Own the SOC operating cadence, including the on-call rotation, alert-quality review cycle, shift handoffs, and escalation paths; identify and resolve process drift early
- Coordinate live incidents by keeping the right people engaged, recording decisions in real time, and assigning and tracking follow-up actions
- Design, facilitate, and document quarterly tabletop exercises for the Operations team; support larger cross-functional exercises involving legal, IT, and business leaders
- Run structured post-incident reviews following significant incidents, using severity levels defined in the incident response plan, and ensure lessons feed back into playbooks and the detection backlog
- Produce monthly and quarterly Operations reports for leadership covering metrics such as MTTR, alert volume, true-positive rate, on-call load, incident frequency, and audit findings
Requirements
- Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field
- Nice to have: tabletop exercises
- Nice to have: post-incident reviews
- Nice to have: NICE Workforce Framework
- Nice to have: PMP