Manager, Cyber Threat Management & Security Operations

About the Company

Responsibilities

• ● Lead and mature the enterprise Cyber Threat Management program.
• ● Establish threat-informed defense strategies based on emerging threat intelligence, adversary tactics, and business risk.
• ● Identify and assess cyber threats relevant to the organization's technology landscape and industry.
• ● Translate threat intelligence into actionable security controls, detection content, and risk mitigation initiatives.
• ● Maintain awareness of evolving threat actors, attack campaigns, and emerging attack techniques.
• ● Provide strategic threat reporting and recommendations to Information Security leadership.
• ● Establish and manage Cyber Threat Intelligence (CTI) capabilities.
• ● Develop intelligence requirements aligned to organizational risks and critical assets.
• ● Lead proactive threat hunting activities acrossendpoints, cloud environments, networks, and enterprise systems.
• ● Correlate intelligence from internal and external sources to identify potential compromises and emerging threats.
• ● Develop adversary profiles and threat scenarios relevant to the business.
• ● Maintain alignment with MITRE ATT&CK and other threat intelligence frameworks.
• ● Own enterprise detection engineering processes and standards.
• ● Develop and continuously improve detection use cases based on intelligence, vulnerabilities, incidents, and emerging threats.
• ● Ensure effective integration of security telemetry across cloud, endpoint, network, identity, and application environments.
• ● Measure and improve detection coverage against MITRE ATT&CK techniques.
• ● Lead the creation and optimization of security analytics and detection logic.
• ● Partner with SOC teams to improve detection quality and reduce false positives.
• ● Own the enterprise vulnerability management program.
• ● Establish risk-based vulnerability prioritization using threat intelligence, exploitability, business criticality, and attack path analysis.
• ● Oversee vulnerability remediation governance and reporting.
• ● Drive remediation accountability across infrastructure, cloud, application, and business technology teams.
• ● Implement and mature Continuous Threat Exposure Management (CTEM) practices.
• ● Track external exploit trends and evaluate organizational exposure.
• ● Lead External Attack Surface Management (EASM) and Internal Attack Surface Management initiatives.
• ● Identify internet-facing assets, shadow IT, exposed services, and security misconfigurations.
• ● Oversee continuous security assessments of external-facing infrastructure.
• ● Develop metrics and reporting related to enterprise attack surface reduction.
• ● Drive remediation programs to reduce organizational exposure.
• ● Lead security control validation initiatives across critical environments.
• ● Coordinate threat-led testing, purple team exercises, breach and attack simulations, and adversary emulation activities.
• ● Validate effectiveness of preventive and detective controls.
• ● Identify detection gaps and control weaknesses.
• ● Work closely with infrastructure and engineering teams to improve defensive capabilities.
• ● Define Security Operations standards, procedures, and operational effectiveness measures.
• ● Establish Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and cyber resilience metrics.
• ● Drive security automation and orchestration opportunities to improve operational efficiency.
• ● Develop executive reporting on cyber threats, exposure trends, and security posture.
• ● Manage security technology roadmaps related to threat management capabilities.
• ● Provide security oversight and guidance for network, cloud, and infrastructure security initiatives.

Requirements

• ● Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related discipline.
• ● Master's Degree in Cybersecurity or Information Security preferred.
• ● 10+ years of cybersecurity experience.
• ● 5+ years of experience in Cyber Threat Management, Threat Intelligence, Security Operations, Detection Engineering, or Vulnerability Management.
• ● 3+ years of people leadership experience.
• ● Experience developing threat-informed defense strategies and cyber risk reduction programs.
• ● Experience working within enterprise network, infrastructure, cloud, and cybersecurity environments.
• ● Experience managing cross-functional cybersecurity initiatives and executive stakeholders.