Manager, Cybersecurity Operations

Cybersecurity Operations Manager

The Cybersecurity Operations Manager is responsible for leading the organization’s security operations function and serving as the primary incident response lead. The role oversees day-to-day security monitoring, detection, and response activities while providing leadership during cybersecurity incidents. This position combines hands‑on technical expertise with team leadership, strategic planning, and cross‑functional collaboration to strengthen the organization’s overall security posture.

Responsibilities

• Lead daily security operations activities, ensuring effective monitoring, investigation, and response to security events and incidents.
• Manage and mentor security operations personnel, fostering a high‑performing and collaborative team environment.
• Maintain a hands‑on approach to security operations by supporting complex investigations, threat analysis, and security engineering initiatives.
• Develop and optimize security monitoring, detection, and response capabilities through process improvements and automation.
• Serve as the primary incident response lead, coordinating containment, remediation, recovery efforts, and post‑incident reviews.
• Maintain incident response plans, procedures, and playbooks while facilitating regular tabletop exercises and readiness assessments.
• Collaborate with technology and business teams to integrate security best practices into operational processes and technology initiatives.
• Support infrastructure and cloud security hardening efforts through the implementation of industry‑standard controls and configurations.
• Monitor emerging threats and vulnerabilities, leveraging threat intelligence to drive proactive defense and threat hunting activities.
• Oversee security awareness initiatives and employee education programs.
• Develop operational metrics and reporting to communicate security performance, risks, and recommendations to leadership.

Qualifications

• Degree in Cybersecurity, Computer Science, Information Technology, or equivalent experience.
• CISSP, CISM, or comparable industry certification preferred.
• 7+ years of cybersecurity experience, including security operations, incident response, or cyber defense.
• 3+ years of leadership experience managing cybersecurity or security operations teams.
• Demonstrated experience leading the full incident lifecycle from detection through remediation and post‑incident analysis.
• Strong understanding of security operations technologies, including SIEM, endpoint security, cloud security, threat detection, and security automation platforms.
• Experience applying security frameworks such as NIST CSF, MITRE ATT&CK, ISO 27001, SOC 2, or similar standards.
• Proven ability to communicate technical risks to both technical and non‑technical stakeholders.
• Strong coaching, mentorship, and team development capabilities.
• Experience developing detection content, investigation workflows, and security monitoring use cases within modern enterprise environments.

Equal Opportunity Employment

Affinity is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. All employment decisions are made on the basis of qualifications, merit, and business need.