Hi,
We have a 12 months requirement for Cybersecurity Operations Manager for the location - San Diego, CA., USA- USC- Local Only
Job Title: Cybersecurity Operations Manager
Location: San Diego, CA.
Job Type: Contract 12 months (possibilities of further extension).
Hourly Rate: $DOE.
Mandatory / Required
- CISSP or CISM
- CCFA, or demonstrably equivalent senior hands-on CrowdStrike Falcon experience
Nice to Have
- CCFR and/or CCFH
- CCSP
- GCIH, GCED or equivalent GIAC
- PMP
- ITIL 4
- Microsoft Security Operations Analyst / Cybersecurity Architect
- Other relevant CrowdStrike certifications
Position Summary
This 12-month role will lead operational oversight of CrowdStrike services, including implementation, adoption, governance, and daily coordination.
The resource will coordinate implementation through steady-state support, serving as the central contact for Falcon Complete, CTEM, Falcon Client / AIDR, service reviews, and escalations.
Primary Objectives During the First Year
· Lead the successful implementation and onboarding of CrowdStrike services.
· Establish governance, operational reviews, escalation paths, and service-management processes.
· Manage CTEM operations and remediation coordination.
· Manage Falcon Client / AIDR administration and operating processes.
· Assist ICW in maturing security operations and incident-response processes.
· Complete knowledge transfer and operational-readiness documentation before the end of the assignment.
Key Responsibilities
CrowdStrike Service Management
· Act as the primary operational liaison for Falcon Complete service matters.
· Coordinate critical-incident communications, follow-up actions, and closure.
· Ensure recommendations are assigned, tracked, and resolved by the appropriate ICW or Client team.
Security Operations and GSI Coordination
· Coordinate implementation workstreams, dependencies, risks, and delivery with Client as the GSI.
· Maintain accountability through documented owners, due dates, actions, and escalations.
· Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams.
CTEM and Falcon Client / AIDR
· Lead day-to-day administration and operating processes for CTEM and Falcon Client / AIDR.
· Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement.
· Integrate findings into ICW workflows and partner with asset owners to reduce risk.
Governance, Reporting, and Transition
· Lead weekly operational and monthly service reviews.
· Maintain a RAID log covering risks, assumptions, issues, and dependencies.
· Create executive dashboards and concise status reporting.
· Maintain the roadmap, RACI, escalation model, and transition plan.
Deliverables During the Engagement
· Implementation oversight, deployment coordination, and operational transition plan.
· Security-operations governance framework, cadence, RACI, and escalation model.
· Executive dashboards, monthly service reviews, and action tracking.
· Incident-escalation and stakeholder-communication process.
· CTEM remediation tracking and Falcon Client / AIDR operating procedures.
· RAID log and remediation-status reporting.
· Knowledge-transfer and operational-readiness documentation.
Required Experience and Qualifications
· 10+ years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services.
· 5+ years leading enterprise SOC, MDR, incident-response, or managed-security programs.
· 3+ years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Client / AIDR.
· Experience in a senior client-facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager.
· Proven coordination across customers, cybersecurity vendors, and global systems integrators during implementation and operations.
· Experience with critical escalations, governance, executive reporting, service reviews, and cross-functional remediation.
· Ability to work onsite in San Diego for the 12-month assignment.
· Strong communication skills and the ability to translate technical issues into business impact and clear actions.
Preferred Technical Experience
· CrowdStrike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Client / AIDR, Falcon Next-Gen SIEM, and Falcon OverWatch.
· Security incident response, threat hunting, detection engineering, vulnerability and exposure management, and SOC operations.
· ServiceNow and Jira workflows; Microsoft Intune, SCCM, BigFix, or comparable endpoint-deployment tools.
· Identity platforms such as Microsoft Entra ID, Active Directory, and Okta.
· Cloud environments including Microsoft Azure, Amazon Web Services, or Google Cloud.
· Working knowledge of NIST Cybersecurity Framework, MITRE Telecommunication&CK, CIS Controls, ISO/IEC 27001, and ITIL practices.
Cybersecurity and Leadership
· CISSP - Certified Information Systems Security Professional.
· CISM - Certified Information Security Manager.
· CCSP - Certified Cloud Security Professional.
· GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), or comparable GIAC certification.
· CompTIA Security+ for candidates whose broader experience demonstrates senior-level capability.
CrowdStrike
· CrowdStrike Certified Falcon Administrator (CCFA).
· CrowdStrike Certified Falcon Responder (CCFR).
· CrowdStrike Certified Falcon Hunter (CCFH).
· Other current CrowdStrike credentials relevant to Falcon Complete, identity, exposure management, or Next-Gen SIEM.
Program and Service Management
· PMP - Project Management Professional.
· ITIL 4 Foundation or advanced ITIL certification.
· Microsoft Certified: Security Operations Analyst Associate or Cybersecurity Architect Expert.
