Cybersecurity Operations Lead

$104,000 - $114,400/Yr

Russell Tobin - Minneapolis, MN

Full-time - Mid Level

Minneapolis, MN

Administrative and Support Services

About the position

The Cybersecurity Operations Lead is responsible for enhancing cybersecurity operations, incident response, and cyber investigations within the organization. This role is crucial for advancing the security operations strategy, developing the effectiveness of the Security Operations Center (SOC), and coordinating cyber investigations. The successful candidate will work closely with internal security and technology teams and oversee third-party SOC services to ensure high levels of security and operational efficiency.

Responsibilities

• Lead initiatives to improve SOC capabilities, enhancing threat detection, response efficiency, and KPI adherence.
• Act as the Cyber Incident Commander during incidents, executing CSIRT playbooks, mobilizing cross-functional teams, and guiding executive-level communication during events.
• Lead cybersecurity investigations, coordinating with internal and external experts, and developing comprehensive incident documentation.
• Develop strategies in partnership with technology teams to advance threat detection capabilities and enhance monitoring across platforms.
• Regularly engage with executive leadership to provide updates on cybersecurity incidents and improvements.
• Conduct and lead at least two internal incident response tabletop exercises annually.
• Drive automation and workflow improvements to streamline SOC functions and reduce manual interventions.

Requirements

• 7+ years in cybersecurity operations, with at least 5 years in incident response, including 2+ years of oversight of third-party SOC services.
• Bachelor's degree in Cybersecurity, Computer Science, or a related field, or equivalent experience.
• CISSP preferred (or commitment to obtain within one year of hire).

Nice-to-haves

• Expertise in cloud security for environments like AWS, Azure, or GCP.
• Knowledge of cybersecurity frameworks (MITRE ATT&CK, VERIS).
• Familiarity with security tools such as SIEM, DLP, CASB, EDR, and SOAR platforms.
• Exceptional communication skills for both technical and non-technical audiences.
• Additional certifications (C|EH, CISA, CISM, CompTIA Security+, AWS/Azure certifications) are a plus.

Benefits

• Comprehensive healthcare coverage (medical, dental, and vision plans)
• Supplemental coverage (accident insurance, critical illness insurance, and hospital indemnity)
• 401(k) retirement savings
• Life & disability insurance
• Employee assistance program
• Legal support
• Auto and home insurance
• Pet insurance
• Employee discounts with preferred vendors