MethodHub is looking for Cybersecurity Operations Manager (San Diego) in San Diego, CA.
This local job opportunity with ID 3916058507 is live since 2026-10-25 11:30:25.
Cybersecurity Operations Manager / Technical Account Manager (TAM) Location: San Diego, California Duration: 12 months Position Summary We are seeking an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) to serve as the onsite liaison among client partners. This 12-month role will lead operational oversight of CrowdStrike services, including implementation, adoption, governance, and daily coordination. The resource will coordinate implementation through steady-state support, serving as the central contact for Falcon Complete, CTEM, Falcon Guardian / AIDR, service reviews, and escalations. Primary Objectives During the First Year · Lead the successful implementation and onboarding of CrowdStrike services. · Establish governance, operational reviews, escalation paths, and service-management processes. · Manage CTEM operations and remediation coordination. · Manage Falcon Guardian / AIDR administration and operating processes. · Assist ICW in maturing security operations and incident-response processes. · Complete knowledge transfer and operational-readiness documentation before the end of the assignment. Key Responsibilities CrowdStrike Service Management · Act as the primary operational liaison for Falcon Complete service matters. · Coordinate critical-incident communications, follow-up actions, and closure. · Ensure recommendations are assigned, tracked, and resolved by the appropriate team. Security Operations and GSI Coordination · Coordinate implementation workstreams, dependencies, risks, and delivery with the client as the GSI. · Maintain accountability through documented owners, due dates, actions, and escalations. · Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams. CTEM and Falcon Guardian / AIDR · Lead day-to-day administration and operating processes for CTEM and Falcon Guardian / AIDR. · Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement. · Integrate findings into ICW workflows and partner with asset owners to reduce risk. Governance, Reporting, and Transition · Lead weekly operational and monthly service reviews. · Maintain a RAID log covering risks, assumptions, issues, and dependencies. · Create executive dashboards and concise status reporting. · Maintain the roadmap, RACI, escalation model, and transition plan. Deliverables During the Engagement · Implementation oversight, deployment coordination, and operational transition plan. · Security-operations governance framework, cadence, RACI, and escalation model. · Executive dashboards, monthly service reviews, and action tracking. · Incident-escalation and stakeholder-communication process. · CTEM remediation tracking and Falcon Guardian / AIDR operating procedures. · RAID log and remediation-status reporting. · Knowledge-transfer and operational-readiness documentation. Required Experience and Qualifications · 10 years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services. · 5 years leading enterprise SOC, MDR, incident-response, or managed-security programs. · 3 years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian / AIDR. · Experience in a senior client-facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager. · Proven coordination across customers, cybersecurity vendors, and global systems integrators during implementation and operations. · Experience with critical escalations, governance, executive reporting, service reviews, and cross-functional remediation. · Strong communication skills and the ability to translate technical issues into business impact and clear actions. Preferred Technical Experience · CrowdStrike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Guardian / AIDR, Falcon Next-Gen SIEM, and Falcon OverWatch. · Security incident response, threat hunting, detection engineering, vulnerability and exposure management, and SOC operations. · ServiceNow and Jira workflows; Microsoft Intune, SCCM, BigFix, or comparable endpoint-deployment tools. · Identity platforms such as Microsoft Entra ID, Active Directory, and Okta. · Cloud environments including Microsoft Azure, Amazon Web Services, or Google Cloud. · Working knowledge of NIST Cybersecurity Framework, MITRE ATT&CK, CIS Controls, ISO/IEC 27001, and ITIL practices. Cybersecurity and Leadership · CISSP - Certified Information Systems Security Professional. · CISM - Certified Information Security Manager. · CCSP - Certified Cloud Security Professional. · GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), or comparable GIAC certification. · CompTIA Security for candidates whose broader experience demonstrates senior-level capability. CrowdStrike · CrowdStrike Certified Falcon Administrator (CCFA). · CrowdStrike Certified Falcon Responder (CCFR). · CrowdStrike Certified Falcon Hunter (CCFH). · Other current CrowdStrike credentials relevant to Falcon Complete, identity, exposure management, or Next-Gen SIEM. Program and Service Management · PMP - Project Management Professional. · ITIL 4 Foundation or advanced ITIL certification. · Microsoft Certified: Security Operations Analyst Associate or Cybersecurity Architect Expert.5c143e31-5e48-4549-b638-05792d185386
read more
