Cybersecurity Operations Manager

Cybersecurity Operations Manager / Technical Account Manager (TAM)

Please make sure you read the following details carefully before making any applications.

Location: San Diego, California

Duration: 12 months

Position Summary

We are seeking an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) to serve as the onsite liaison among client partners. This 12-month role will lead operational oversight of CrowdStrike services, including implementation, adoption, governance, and daily coordination.

The resource will coordinate implementation through steady-state support, serving as the central contact for Falcon Complete, CTEM, Falcon Guardian / AIDR, service reviews, and escalations.

Primary Objectives During the First Year

· Lead the successful implementation and onboarding of CrowdStrike services.

· Establish governance, operational reviews, escalation paths, and service-management processes.

· Manage CTEM operations and remediation coordination.

· Manage Falcon Guardian / AIDR administration and operating processes.

· Assist ICW in maturing security operations and incident-response processes.

· Complete knowledge transfer and operational-readiness documentation before the end of the assignment.

Key Responsibilities

CrowdStrike Service Management

· Act as the primary operational liaison for Falcon Complete service matters.

· Coordinate critical-incident communications, follow-up actions, and closure.

· Ensure recommendations are assigned, tracked, and resolved by the appropriate team.

Security Operations and GSI Coordination

· Coordinate implementation workstreams, dependencies, risks, and delivery with the client as the GSI.

· Maintain accountability through documented owners, due dates, actions, and escalations.

· Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams.

CTEM and Falcon Guardian / AIDR

· Lead day-to-day administration and operating processes for CTEM and Falcon Guardian / AIDR.

· Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement.

· Integrate findings into ICW workflows and partner with asset owners to reduce risk.

Governance, Reporting, and Transition

· Lead weekly operational and monthly service reviews.

· Maintain a RAID log covering risks, assumptions, issues, and dependencies.

· Create executive dashboards and concise status reporting.

· Maintain the roadmap, RACI, escalation model, and transition plan.

Deliverables During the Engagement

· Implementation oversight, deployment coordination, and operational transition plan.

· Security-operations governance framework, cadence, RACI, and escalation model.

· Executive dashboards, monthly service reviews, and action tracking.

· Incident-escalation and stakeholder-communication process.

· CTEM remediation tracking and Falcon Guardian / AIDR operating procedures.

· RAID log and remediation-status reporting.

· Knowledge-transfer and operational-readiness documentation.

Required Experience and Qualifications

· 10+ years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services.

· 5+ years leading enterprise SOC, MDR, incident-response, or managed-security programs.

· 3+ years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian / AIDR.

· Experience in a senior client-facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager.

· Proven coordination across customers, cybersecurity vendors, and global systems integrators during implementation and operations.

· Experience with critical escalations, governance, executive reporting, service reviews, and cross-functional remediation.

· Strong communication skills and the ability to translate technical issues into business impact and clear actions.

Preferred Technical Experience

· CrowdStrike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Guardian / AIDR, Falcon Next-Gen SIEM, and Falcon OverWatch.

· Security incident response, threat hunting, detection engineering, vulnerability and exposure management, and SOC operations.

· ServiceNow and Jira workflows; Microsoft Intune, SCCM, BigFix, or comparable endpoint-deployment tools.

· Identity platforms such as Microsoft Entra ID, Active Directory, and Okta.

· Cloud environments including Microsoft Azure, Amazon Web Services, or Google Cloud.

· Working knowledge of NIST Cybersecurity Framework, MITRE ATT&CK, CIS Controls, ISO/IEC 27001, and ITIL practices.

Cybersecurity and Leadership

· CISSP - Certified Information Systems Security Professional.

· CISM - Certified Information Security Manager.

· CCSP - Certified Cloud Security Professional.

· GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), or comparable GIAC certification.

· CompTIA Security+ for candidates whose broader experience demonstrates senior-level capability.

CrowdStrike

· CrowdStrike Certified Falcon Administrator (CCFA).

· CrowdStrike Certified Falcon Responder (CCFR).

· CrowdStrike Certified Falcon Hunter (CCFH).

· Other current CrowdStrike credentials relevant to Falcon Complete, identity, exposure management, or Next-Gen SIEM.

Program and Service Management

· PMP - Project Management Professional.

· ITIL 4 Foundation or advanced ITIL certification. xhqgsiq

· Microsoft Certified: Security Operations Analyst Associate or Cybersecurity Architect Expert.