Location: San Diego, CA (Local Candidates Only)
Work Model: Hybrid / Onsite
Interview: Mandatory Onsite Face-to-Face
Experience: 10+ Years in Cybersecurity
Job Summary
We are seeking an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) with strong expertise in CrowdStrike Falcon, Security Operations (SOC), Managed Detection and Response (MDR), and Incident Response.
The candidate will serve as the primary liaison between the customer, CrowdStrike, and Atos, managing security service implementation, daily operations, incident escalations, remediation, governance, and executive reporting.
Key Responsibilities
- Manage CrowdStrike Falcon Complete services, onboarding, implementation, adoption, and ongoing operations.
- Oversee SOC, MDR, incident response, threat detection, and security service delivery.
- Lead Continuous Threat Exposure Management (CTEM), exposure prioritization, vulnerability remediation, and risk reduction.
- Administer and coordinate Falcon Guardian / AIDR operations, tuning, reporting, and process improvements.
- Manage security incidents, critical escalations, threat hunting, detection engineering, and remediation activities.
- Coordinate with Atos, CrowdStrike, and customer teams across endpoint, infrastructure, identity, cloud, and application security.
- Conduct weekly operational reviews, monthly service reviews, and executive reporting.
- Develop security dashboards, remediation tracking, RAID logs, RACI matrices, escalation procedures, and governance frameworks.
- Manage implementation dependencies, service improvements, stakeholder communications, and operational risks.
- Establish incident-response procedures, operational documentation, knowledge transfer, and transition plans.
Required Skills & Experience
- 10+ years of experience in cybersecurity, security operations, incident response, threat detection, or managed security services.
- 5+ years managing enterprise SOC, MDR, incident-response, or managed-security programs.
- 3+ years of hands-on operational experience with CrowdStrike Falcon technologies.
- Strong knowledge of CrowdStrike Falcon Complete, Falcon Insight EDR, Identity Protection, Exposure Management, and Falcon Guardian / AIDR.
- Experience with CTEM, vulnerability management, exposure prioritization, and security remediation.
- Strong understanding of SOC operations, incident management, threat hunting, detection engineering, and endpoint security.
- Experience managing security service delivery, critical escalations, governance, and executive reporting.
- Experience coordinating with cybersecurity vendors, customers, and Global Systems Integrators (GSI).
- Familiarity with ITIL processes, service reviews, SLA management, and operational governance.
- Strong communication, stakeholder management, and technical leadership skills.
- Previous experience as a Technical Account Manager, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager.
Technical Skills
CrowdStrike Technologies
- Falcon Complete
- Falcon Insight EDR
- Falcon Identity Protection
- Falcon Exposure Management
- Falcon Guardian / AIDR
- Falcon Next-Gen SIEM
- Falcon OverWatch
Cybersecurity Operations
- SOC / MDR Operations
- Incident Response & Incident Management
- Threat Hunting & Detection Engineering
- Continuous Threat Exposure Management (CTEM)
- Vulnerability & Exposure Management
- Endpoint Detection & Response (EDR)
- Risk Assessment, Remediation & Security Governance
Tools & Platforms
- ServiceNow, Jira
- Microsoft Intune, SCCM, BigFix
- Microsoft Entra ID, Active Directory, Okta
- Microsoft Azure, AWS, Google Cloud (GCP)
Security Frameworks
- NIST Cybersecurity Framework (NIST CSF)
- MITRE ATT&CK
- CIS Controls
- ISO/IEC 27001
- ITIL / ITIL 4
Governance & Service Management
- SLA Management, RAID Logs, RACI
- Executive Dashboards & Service Reporting
- Incident Escalation & Stakeholder Communication
- Implementation & Deployment Coordination
- Knowledge Transfer & Operational Readiness
- Certifications
Required: CISSP or CISM; CCFA or demonstrably equivalent senior-level hands-on CrowdStrike Falcon experience. The client may consider equivalent expertise in place of the listed certifications, subject to approval.
Preferred:
- CrowdStrike Certified Falcon Responder (CCFR)
- CrowdStrike Certified Falcon Hunter (CCFH)
- Certified Cloud Security Professional (CCSP)
- GIAC GCIH / GCED or equivalent
- Project Management Professional (PMP)
- ITIL 4
- Microsoft Security Operations Analyst / Cybersecurity Architect
- CompTIA Security+ (with substantial senior-level experience)
- Other relevant CrowdStrike certifications