Cybersecurity Operations & Communications Lead
Overview
Own the security operations and communications strategy for a global enterprise, coordinating incident response across SIEM, SOAR, and EDR platforms. You lead a team of analysts, manage threat intelligence feeds, and craft executive-level briefings. This role sits at the intersection of technical operations and stakeholder communication, reporting directly to the CISO. You will drive the adoption of MITRE ATT&CK framework and NIST guidelines, shaping the organization's cyber resilience.
What You'll Do9
- 1Build and lead a 24/7 security operations team, managing shift rotations and escalations for SIEM alerts and EDR incidents.
- 2Design and implement incident response playbooks for phishing, ransomware, and cloud breaches, ensuring repeatable and measurable processes.
- 3Own the communication plan for security incidents, delivering real-time updates to executives and board members via Slack and Zoom.
- 4Drive the deployment of SOAR automation to reduce mean time to respond (MTTR) by 30% within the first quarter.
- 5Coordinate with IT and engineering teams to patch critical vulnerabilities identified by Tenable and Qualys scans.
- 6Mentor junior analysts on MITRE ATT&CK techniques and NIST incident response phases.
- 7Develop and maintain security metrics dashboards using Power BI to track KPIs for management reviews.
- 8Conduct tabletop exercises with cross-functional teams to test incident response readiness and improve communication flows.
- 9Collaborate with threat intelligence providers to integrate MISP feeds into the SIEM for proactive detection.
Requirements9
- 15+ years in cybersecurity operations, with at least 2 years in a leadership role overseeing SOC teams.
- 2Hands-on experience with Splunk or Azure Sentinel for log analysis and alert tuning.
- 3Expertise in EDR tools like CrowdStrike or Carbon Black for endpoint detection and response.
- 4Strong background in incident response and forensic analysis, including memory and disk forensics with Volatility and FTK.
- 5Proven ability to communicate technical issues to non-technical stakeholders, with examples of executive briefings.
- 6Relevant certifications such as CISSP, CISM, or GIAC are required.
- 7Experience with AWS and Azure cloud environments, including security group management and CloudTrail logging.
- 8Knowledge of regulatory frameworks including PCI-DSS, HIPAA, and GDPR.
- 9Bachelor's degree in Computer Science or a related field, or equivalent work experience.
Salary Insight
$187 - $208k per year
Location
Required Skills
Similar open positions
Explore active roles that match your skills and interests.
Visionaire Partners
VerifiedSenior Cybersecurity Engineer, Cloud Security
You will spearhead defensive operations, threat detection, and risk mitigation across complex enterprise networks, AWS and Azure, and endpoint environments. You will design security tool architecture to harden system baselines and drive security posture across cloud and containerized infrastructure. Your stack includes SIEM, EDR, CSPM, and IaC tools. You will partner with DevOps and network teams to embed security into the build pipeline. This role puts you at the center of security strategy for a critical infrastructure provider.
MANTECH
VerifiedCyber Security Analyst, Incident Response & SOC
You will own security event correlation and incident triage across enterprise networks, detecting and responding to threats in real time. You will work within a 24x7 SOC team, analyzing alerts from Windows and Linux systems and coordinating remediation. You hold IAT Level II certification (Security+ or equivalent) and thrive in high-stakes environments. This role offers direct exposure to COTS security tools and a clear path to advanced cyber roles.
Concert Golf Partners
VerifiedSenior Cybersecurity Manager, Enterprise Security Operations
You will own the daily operation and health of Concert Golf Partners' enterprise security platform across 40+ premier golf clubs. You will run EDR, SIEM, email security, and vulnerability management tools at scale, reporting to the VP of IT. You will set operating standards and lead technical initiatives with limited oversight. This role offers the chance to shape security operations for a multi-site enterprise, with travel to club locations.
Mercor
VerifiedSecurity Operations Expert, AI Trainer & Threat Detection
Security Operations Expert builds realistic cybersecurity scenarios for AI training. You design incident response, vulnerability management, and compliance tasks that distinguish expert judgment from rote recall. Collaborate with a team at Mercor connecting elite talent with AI research labs. Own the challenge from first draft to final rubric, shaping how models learn security thinking.
SPAHR SOLUTIONS GROUP LLC
VerifiedCybersecurity Protect Analyst
Lead technical cybersecurity liaison for subscriber organizations delivering advanced guidance on resolving complex security posture issues and patching delays. Serve as primary auditor for Data Element Dictionary governance overseeing validation rules for identity-attributed network and object-access events. Manage vulnerability tracking and KEV mitigation leveraging CVE NVD CVSS and CWE classifications. Conduct vulnerability assessments using ACAS and other enterprise scanning tools to provide prioritized remediation steps.
HarveStaff
VerifiedCybersecurity Security Operations & Communications Lead
Global agriculture enterprise seeks Cybersecurity Security Operations & Communications Lead to drive strategic coordination and operational excellence. This role aligns Chief of Staff portfolio management with cross-functional teams to ensure alignment transparency and execution of priorities while supporting leadership and stakeholder engagement.