Manager of Cyber Security I

Responsible for safeguarding enterprise and customer-facing technology environments by identifying, mitigating, and remediating cybersecurity risks. This role leads security operations, incident response coordination, security tooling administration, vulnerability management, vendor/MSSP engagement, and continuous improvement of security controls across the organization.

ESSENTIAL JOB DUTIES

• Lead daily security operations, including alert triage, investigation, escalation, containment, remediation coordination, documentation, and post-incident follow-up.

• Serve as an operational leader for incident response, ensuring events are validated, classified, escalated, tracked, and managed through appropriate ticketing and incident management processes.

• Maintain and improve security runbooks, response procedures, investigation workflows, evidence handling, technical timelines, and post-incident review practices.

• Operate and mature detection, response, threat monitoring, threat hunting, and suspicious activity review capabilities.

• Partner with Fraud Prevention and Application Security on account takeover, bot, abuse, credential attack, and other adversarial activity affecting customer or commerce platforms.

• Own administration, integration, performance, documentation, lifecycle planning, SME coverage, and support expectations for core security operations tools.

• Improve tooling effectiveness to reduce risk, improve visibility, or reduce operational complexity.

• Own or coordinate vulnerability management workflows, including intake, prioritization, remediation tracking, exception handling, validation, assessments, penetration tests, assumed breach exercises, and reporting.

• Partner with Application Security, Infrastructure, Cloud, and Technology teams to drive timely remediation of vulnerabilities and control gaps.

• Manage WAF, bot mitigation, API protection, and related edge security changes while balancing risk reduction with customer and platform availability.

• Manage day-to-day relationships with security vendors, VARs, and consulting partners.

• Support cybersecurity standards, audit evidence, PCI/SOX-related controls, incident response readiness, and privacy/compliance requirements where security operations evidence or technical support is needed.

• Lead, coach, and develop cybersecurity operations team members while establishing priorities, ownership, operating rhythms, on-call expectations, escalation paths, and accountability.

• Perform other duties as required, including leading special projects assigned by leadership.

IMPACT

The Manager of Cybersecurity directly improves the company’s ability to detect, investigate, contain, and recover from cybersecurity threats. This role keeps security operations aligned with business priorities, reduces operational and customer-facing risk, improves the effectiveness of security tools, and ensures the organization is prepared to respond to security events with speed, discipline, and appropriate documentation.