Manager, Cyber Security Operations

Role & responsibilities

DU Tech is looking for a Manager, Cyber Security Operations to lead cyber security operations capabilities across security monitoring, incident response, threat detection, investigations, vulnerability operations, and control execution. This role combines people leadership, delivery accountability, stakeholder partnership, and disciplined execution to deliver reliable, scalable, secure, and customer-focused outcomes.

Job Responsibilities

Delivery & Execution

• Lead planning, delivery, and operational performance for cyber security operations.
• Guide a team responsible for security monitoring, incident response, threat detection, investigations, vulnerability operations, and control execution.
• Translate priorities into roadmaps, plans, backlogs, and measurable outcomes.
• Reinforce quality, architecture, security, privacy, compliance, and operational standards.
• Manage capacity, delivery risks, dependencies, budgets, and vendors as applicable.
• Use metrics to improve quality, speed, reliability, cost, and stakeholder value.

Support & Enablement

• Lead, coach, and develop team members; support hiring, performance, and talent processes.
• Build strong partnerships across business, product, architecture, security, data, and technology teams.
• Communicate priorities, progress, risks, and decisions clearly.
• Create an inclusive, accountable, and high-performing team environment.

Education & Experience

Bachelor's degree in Computer Science, Information Technology, Engineering, Design, Analytics, Business, or a related discipline

• 4 to 9 years of relevant experience in cyber security operations or a closely related discipline
• Experience with security monitoring, incident response, threat detection, investigations, vulnerability operations, and control execution
• Experience leading teams, workstreams, programs, or technology delivery in a complex organization
• Knowledge of SIEM, incident response, threat detection, vulnerability management, security operations, and automation
• Experience collaborating across business and technology teams
• Strong analytical, problem-solving, written, and verbal communication skills

Preferred Qualifications & Interests (PQIs)

• Master's degree in a related technical or business field is preferred
• Advanced knowledge of SIEM, incident response, threat detection, vulnerability management, security operations, and automation
• Experience with enterprise-scale cloud, data, digital, retail, pharmacy, healthcare, or customer technology environments
• Experience working with global teams, managed service partners, or distributed delivery models
• Relevant industry, cloud, agile, product, architecture, data, security, design, or technology certifications are preferred

Skills mandatory :

Key Primary Skills : Splunk & MSFT Defender advanced experience, Strong MITRE ATT&CK framework knowledge, Cybersecurity Incident handling & response experience, Leadership and mentoring abilities, Strong written and verbal communication

Secondary Skills: Threat hunting and forensics capabilities, Scripting/automation (Python, PowerShell, KQL)