[Hiring] Senior Manager of IT & Cyber Security @OnTrac

Role Description

The Senior Manager, CSIRT / Security Operations Center (SOC) leads and matures the organization’s cyber defense capabilities through operational excellence in:

• Security monitoring
• Cyber incident response
• Crisis management
• Threat intelligence
• Threat hunting
• Detection engineering
• Security validation
• Cloud and identity security operations
• Security automation

This role provides strategic and operational leadership for Security Operations personnel and oversees:

• People
• Processes
• Technologies
• Budget
• Vendor relationships
• Performance measures

The Senior Manager ensures sustainable 24x7 coverage while driving the responsible adoption of automation and AI-enabled security operations.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field
• Master’s degree preferred, but not required
• 10+ years of progressive cybersecurity experience
• 5+ years of leadership experience managing Security Operations, Incident Response, Cyber Defense, or SOC teams
• Demonstrated experience building and maturing SOC capabilities, incident response programs, and detection engineering functions
• Experience developing cybersecurity operational metrics, executive reporting, and performance dashboards, including MTTD, MTTR, KPIs, and KRIs
• Proven success implementing SIEM, EDR, SOAR, and automated or AI-assisted response capabilities
• Experience managing 24x7 staffing models, budgets, and third-party security vendors or MSSPs
• Preferred certifications include CISSP, CISM, GIAC GCIH, GIAC GCIA, and GMON
• Cloud security certifications such as Azure Security Engineer Associate or Microsoft Cybersecurity Architect Expert preferred

Requirements

• Lead daily SOC/ARC monitoring, alert triage, investigations, and incident response
• Manage analysts, shift leads, and incident handlers across all tiers
• Define Tier 1/2/3 responsibilities and escalation criteria
• Establish a sustainable coverage model using follow-the-sun, dedicated shifts, or hybrid on-call rotations
• Ensure qualified staffing and service coverage while developing organizational and workforce plans
• Build and mature incident response procedures, runbooks, and playbooks
• Coordinate high-severity incident response across IT, Legal, Communications/PR, and executive leadership
• Develop the detection engineering and proactive threat-hunting programs
• Establish and report MTTD, MTTR, MTTC, detection coverage, alert fidelity, incident volume, severity trends, and analyst productivity
• Optimize security tools, processes, and SIEM/SOAR platforms to reduce analyst fatigue and accelerate response
• Align security operations and incident handling with applicable regulatory requirements and frameworks
• Manage the SOC operating budget across tools, staffing, and managed services
• Recruit, coach, mentor, and develop security operations personnel at all levels

Benefits

• Medical, dental, and vision insurance
• Life and short- and long-term disability coverage
• 401(k) retirement savings plan with company match
• Flex vacation with accruals up to 96 hours for first year of employment
• Two (2) floating holidays per year
• Paid sick leave*
• Six (6) paid company holidays
• Two (2) weeks paid pregnancy disability leave, four (4) weeks paid parental bonding leave
• Additional wellness and employee assistance programs

Benefits eligibility and offerings are subject to the terms and conditions of the applicable plans and company policies.