Quality Technician Lead
Role details
Job location
Tech stack
Job description
(Sr Security Engineer) Keurig Dr Pepper is seeking a Cybersecurity Operations Manager to serve as cybersecurity operations manager, leading day to day cybersecurity operations. This role responsible for incident response leadership, investigation quality, SOC execution, and the management and development of security analysts. This position functions as the operational leader for cyber defense-balancing people leadership, incident command, and hands on technical oversight across endpoint, email, and log driven detections. What you will do: As the Cybersecurity Operations Manager, you will…
- Lead the cybersecurity incident response process, coordinating detection, containment, eradication, recovery, and remediation.
- Perform detailed incident investigations, root cause analysis, and post-incident reviews.
- Oversee daily SOC operations: alert triage, escalation, monitoring, and response.
- Establish operational standards, escalation paths, and response expectations across the team
- Manage, mentor, and develop security analysts, setting performance goals and supporting growth.
- Own endpoint and email security operations, such as Crowdstrike, Proofpoint, CyberArk, and Microsoft.
- Leverage centralized logging and SIEM; utilize Cribl to optimize data pipelines.
- Stay ahead of emerging threats and technologies, providing strategic recommendations to leadership.
- Develop and enforce security policies, standards, and best practices aligned with NIST, ISO, and CIS frameworks.
- Identify and remediate gaps in detection coverage across the environment.
Requirements
- A technically strong security leader who thrives in operations and people leadership, not just engineering.
- Comfortable making decisions under pressure and leading during live incidents.
- Able to translate technical incidents into clear, business relevant communication.
- Deep knowledge in endpoint centric detection and response.
- Deep knowledge of common vulnerabilities and exploitation techniques.
- Deep knowledge of scripting languages (e.g.: Perl, Python, PowerShell).
- Deep knowledge of security systems including anti-virus applications, content filters, firewalls, authentication systems and intrusion detection, and notification systems.
- Deep knowledge of security best practices across various platforms (e.g., operating systems, computer systems, mobile devices, etc.).
- Proven ability to communicate with business acumen and work with diverse stakeholders, including those in an outsourced environment., * Bachelor's degree in related field (e.g., Computer Science, Computer Engineering, cybersecurity, etc.) or equivalent combination of education and work experience.
- 5+ years of experience in cybersecurity operations, SOC, or incident response roles.
- 2+ years of experience leading or managing security analysts (formal or informal).
- Strong, hands on experience with Crowdstrike (required).
- Experience working with SIEM and centralized logging platforms.
- Solid understanding of attacker tactics, techniques, and procedures (MITRE ATT&CK).
- Proven experience leading complex security incidents from detection through resolution.
- Experience with tools such as Crowdstrike (required), Proofpoint, CyberArk (including EPM), and Microsoft tools (plus).
- Experience working with SIEM and centralized logging platforms, such as Crowdstrike NG-SIEM, Cribl, Microsoft Sentinel.
- Proven experience leading complex security incidents from detection through resolution.
- Excellent problem-solving, communication, and leadership skills.
- Ability to manage multiple priorities in a fast-paced, collaborative environment.
- Experience in both cloud-native and hybrid infrastructure environments.
- Knowledge of security frameworks (NIST, ISO 27001, MITRE ATT&CK) and regulatory compliance (SOX, GDPR, HIPAA).
- Native-level proficiency/fluent in English.
- Experience in DevOps and Agile technology environments. (preferred)
Licenses and Certifications Required:
- Industry certifications such as CISSP, OSCP, GCIH, GCED, CEH, or GIAC and relevant technology / product certifications, such as Crowdstrike or Microsoft (desired but not required)
Benefits & conditions
Mileage reimbursement, Tuition reimbursement, Paid parental leave, Parental leave, Health insurance, 401(k) matching, Paid time off, Vision insurance, * Salary Range: $115,000 - $150,000
- Actual placement within the compensation range may vary depending on experience, skills, and other factors
- Benefits, subject to election and eligibility: Medical, Dental, Vision, Disability, Paid Time Off (including paid parental leave, vacation, and sick time), 401k with company match, Tuition Reimbursement, and Mileage Reimbursement
- Annual bonus based on performance and eligibility