Services Manager, Cybersecurity Operations

Do you have a passion for enabling business with secure, top-tier technology? Do you thrive in a fast paced and ever-evolving environment? Then we have the next career move for you! Who are we? We are ARCO, a Family of Construction Companies. 

The Services Manager, Cybersecurity Operations leads ARCO’s day-to-day security monitoring, detection, and incident response activities. This role manages a team of Cybersecurity Analysts, oversees core security tools, and partners closely with Infrastructure, Applications, and GRC to maintain a strong, resilient security posture. This position is both strategic and hands-on, driving operational excellence, threat mitigation, and continuous improvement.

As a senior member of the team, the role requires a strong ability to lead and mentor team members through the strategy directed by senior management. In addition to technical skills, the Services Manager is results-oriented and demonstrates effective problem-solving and communication skills. 

We are dedicated to the well-being of our associates and are proud to be consistently recognized as a Best Place to Work. Our compensation and benefits package not only supports our associates and their families but benefits local communities and communities around the world.

• Industry-leading performance-based bonus program
• 100% company funded retirement contributions
• Traditional and Roth 401k
• Tuition reimbursement for associates
• Scholarship for associates’ children up to $28,000 per child
• 1-month paid sabbatical after every five years of employment, plus $5,000 for travel
• 1-week paid volunteer leave each year
• 100% charitable match
• Medical, dental, and vision insurance coverage
• 100% paid 12-week maternity leave

At ARCO, our first core value is to treat people fairly and do the right thing. We are committed to building and sustaining a culture that supports diversity and inclusion. We are proud to be an equal opportunity employer, and all qualified applicants will receive consideration for employment.

From recruiting, training, and hiring practices to selecting our subcontractors, we understand that diversity of all those involved in the construction process enhances our ability to deliver the best solutions to our customers. We hire the best and the brightest from across the country – constructing a team of experts in architecture, design, engineering, project management, and business services. 

• Lead, mentor, and develop a team of Cybersecurity Analysts responsible for monitoring, triage, and incident response.
• Oversee daily SOC operations and ensure timely, effective handling of security alerts and requests.
• Automate repetitive tasks and implement process improvements to enhance efficiency.
• Maintain and update runbooks, SOPs, escalation workflows, and operational playbooks.
• Lead all security incident investigations, containment, and remediation activities.
• Conduct regular incident response exercises and postmortems, identifying root causes and tracking improvements.
• Stay current on emerging threats and assess ARCO’s readiness to defend against them.
• Manage and optimize security tooling (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, threat intel platforms, etc.).
• Oversee vulnerability scanning, prioritization, and remediation with Infrastructure partners.
• Support patching, hardening, and secure configuration efforts across systems and networks.
• Guide engineering, deployment, and documentation of security tools.
• Support audits, evidence requests, and compliance requirements (NIST 800-171, CMMC, NIST CSF) in partnership with GRC.
• Develop metrics and dashboards that measure organizational risk and SOC performance.
• Communicate security risks and incident updates to leadership in clear business terms.
• Ensure required security awareness training and phishing simulations are delivered effectively.
• Participate in change management, project reviews, and technology planning discussions.
• Collaborate with Technology teams to identify security gaps and strengthen overall posture.

• 7-10 years of cybersecurity operations/engineering experience, including monitoring and incident response.
• Experience leading people, developing talent, and managing high-performing teams.
• Hands-on experience with core security technologies (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, vulnerability management, threat intel, SOAR).
• Strong communication skills with the ability to translate technical issues into business risk.
• Proven ability to drive measurable improvements in SOC performance.
• Strong organizational skills with the ability to prioritize and delegate.
• Experience with Azure or AWS environments.
• Familiarity with industry frameworks (NIST 800-171, CMMC, NIST CSF).
• Preferred certifications: CISSP, CISM, SANS/GIAC, CySA+, or similar.
• Travel: Up to 10%

EOE, including disability/vets