[Hiring] Cybersecurity Manager, Security Operations Team @Froedtert

Role Description

The SecOps Manager is primarily responsible for the day-to-day operations of the Security Operations Center and team, including:

• Threat detection
• Incident response
• Digital forensics
• Data protection across the health system's clinical, financial, and administrative environments

All activities are conducted in compliance with the organization's security policies and procedures, regulations, and law. Other duties as assigned.

Responsibilities:

• Creates a SecOps program that supports the CISO’s overall Cybersecurity Program and plans.
• Manages, trains, retains, and supports the Security Operations (SecOps) Team.
• Manages the CyberSecurity Operations Center (CSOC) function, overseeing 24x7 monitoring, triage, and escalation of security events.
• Directs incident response activities, including containment, eradication, recovery, and post-incident review.
• Oversees digital forensics and investigations, including evidence collection and chain of custody.
• Manages proactive threat hunting activities to identify adversary behavior.
• Administers and optimizes the SIEM platform, ensuring log source coverage and alert fidelity.
• Oversees data loss prevention (DLP) tooling to prevent unauthorized exfiltration of data.
• Manages email security tooling to defend against phishing and malicious attachments/links.
• Oversees CASB and secure web gateway platforms for safe cloud and web usage.
• Evaluates and integrates security tooling to extend or consolidate the SecOps tool stack.
• Develops and maintains SecOps playbooks, runbooks, and standard operating procedures.
• Monitors compliance with security policies and procedures among employees and third parties.
• Performs security risk analysis and periodic activity reviews.
• Supports disaster recovery and business continuity testing related to security monitoring.
• Serves as an internal SecOps consultant, advising on emerging threats.
• Monitors advancements in security operations technologies and threat intelligence.
• Monitors changes in legislation and accreditation standards affecting security operations.
• Initiates and promotes security awareness activities related to threat detection.
• Serves as SecOps liaison for clinical, financial, administrative, and behavioral systems.
• Maintains an effective Vulnerability Management Program.

Qualifications

• Five or more years of experience in security operations, incident response, or threat hunting.
• Prior people-management or team-lead experience preferred.
• Bachelor's degree in information security, computer science, or a related field is required.

Requirements

• Knowledge of network infrastructure, SIEM administration, DLP/CASB/SWG tooling, email security platforms, and digital forensics methodology.
• Good presentation and communication skills.
• GIAC (GCIH, GCFA, or GNFA), CISSP, or CISM certification is preferred.

Benefits

• Pay is expected to be between $49.15 - $84.07 (hourly).
• Paid time off.
• Growth opportunity - Career Pathways & Career Tuition Assistance, CEU opportunities.
• Academic Partnership with the Medical College of Wisconsin.
• Referral bonuses.
• Retirement plan - 403b.
• Medical, Dental, Vision, Life Insurance, Short & Long Term Disability, Free Workplace Clinics.
• Employee Assistance Programs, Adoption Assistance, Healthy Contributions, Care@Work, Moving Assistance.
• Discounts on gym memberships, travel, and other work-life benefits available.