CYBERSECURITY ENGINEERING MANAGER - 72003934

State of Florida • TALLAHASSEE, FL

5d • $100,000 - $125,000 • Onsite

About The Position

The Cybersecurity Engineering Manager leads the Cybersecurity Engineering section, providing technical leadership and operational oversight for the enterprise security tooling that supports Security Operations Center (SOC) operations. This position is responsible for the reliability, availability, integration, and effectiveness of security platforms, telemetry, and data pipelines used for threat detection, analysis, threat hunting, and incident response.
The position leads the modernization of SOC capabilities by developing engineering processes, technical capabilities, and operational readiness while sustaining current security operations and advancing the organization toward its target-state architecture.
The position supervises, develops, and evaluates employees; assigns and prioritizes work; and ensures effective execution of operational, engineering, and modernization initiatives.

Requirements

• Enterprise cybersecurity engineering principles including the design, implementation, and operation of security platforms that support SOC detection, analytics, and incident response workflows.
• Security tooling architectures and technologies, including SIEM, data lakes, SOAR, detection engineering platforms, and threat intelligence systems.
• Security telemetry sources, detection engineering concepts, analytic workflows, and the technical dependencies required to support effective threat detection and hunting.
• Systems security management practices related to availability, reliability, performance, and resilience of security platforms and supporting infrastructure.
• Incident response processes and the role of engineering support during investigations, containment, and recovery activities.
• Documentation, configuration management, and operational support practices used to sustain complex security platforms over time.
• Modernization concepts relevant to cybersecurity engineering including platform consolidation, automation, scalability, and interoperability.
• Designing, implementing, tuning, and validating SIEM detections using structured detection logic.
• Authoring, reviewing, and operationalizing Sigma rules and adapting them to enterprise environments and tooling constraints.
• Analyzing detection performance using quantitative metrics such as alert volume, false positive rates, and coverage by telemetry source.
• Leading and mentoring cybersecurity engineers.
• Directing engineering priorities, assigning tasks, and managing workloads to support SOC operations, enterprise initiatives, and improvement activities.
• Designing, implementing, configuring, and maintaining security platforms and integrations that enable detection, analytics, and incident response.
• Troubleshooting complex technical issues involving security tools, telemetry pipelines, data quality, and system integrations.
• Validating telemetry fidelity and detection enablement to ensure SOC analysts can effectively perform alert triage, threat hunting, and investigations.
• Coordinating engineering support for SOC operations, including participation in incident response activities requiring platform or tooling expertise.
• Developing and maintaining technical documentation, runbooks, and standard operating procedures for engineering operations and platform support.
• Identifying technical risks, or inefficiencies in tooling and proposing practical engineering solutions.
• Balance current-state operational demands with long-term modernization objectives in a transitioning engineering and SOC environment.
• Ensure the reliability, availability, and performance of security tooling while evolving platform capabilities and integrations.
• Translate SOC operational needs and analyst workflows into effective engineering solutions.
• Independently tune detections and telemetry pipelines to support evolving SOC operational needs.
• Make data-driven decisions about which telemetry sources should or should not be forwarded into the SIEM.
• Execute engineering work in alignment with enterprise architecture standards while supporting iterative improvement and innovation.
• Foster effective collaboration across organizational boundaries while respecting differing priorities and constraints.
• Anticipate emerging technical requirements and prepare engineering capabilities to support future detection, analytics, and response needs.
• Drive continuous improvement of engineering processes, support models, and platform resilience to advance SOC and enterprise cybersecurity maturity.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field; equivalent professional experience may be considered in lieu of a degree.
• 6+ years of progressively responsible experience in cybersecurity engineering, security operations engineering, or related technical roles supporting enterprise security platforms.
• At least 2 years’ experience developing or following engineering processes related to change management, configuration management, or operational support.
• At least 2 years’ of experience leading, mentoring, or coordinating technical staff, including task prioritization and workload management.
• Demonstrated experience designing, implementing, configuring, or maintaining security tooling such as SIEM, SOAR, security data platforms, detection systems, or threat intelligence platforms.
• Demonstrated hands-on experience developing, tuning, and maintaining SIEM detections in a production SOC environment.
• Experience authoring or operationalizing Sigma rules or equivalent structured detection logic.
• Demonstrated experience selecting, filtering, or optimizing security telemetry to support detection and investigation outcomes.
• Experience collaborating with cross-functional teams to support incident response, platform integration, or modernization initiatives.
• Strong written and verbal communication skills are sufficient to provide technical guidance to internal teams and enterprise stakeholders.
• Ability to sit for extended periods of time.
• Ability to stand for extended periods of time.
• Ability to drive and/or fly long distances.
• Ability to lift, push and pull up to 30lbs.

Nice To Haves

• Relevant professional certifications such as CISSP, CCSP, cloud security certifications, or equivalent, preferred.

Responsibilities

• Lead and supervise the Cybersecurity Engineering team, balancing operational support, project priorities, and modernization initiatives.
• Assign and prioritize workloads; monitor productivity, quality, attendance, deadlines, and professional conduct.
• Establish goals, delegate assignments, and promote accountability, collaboration, innovation, and continuous improvement.
• Mentor and develop staff through technical guidance, performance feedback, training, and professional development opportunities.
• Conduct performance evaluations and address performance or behavioral issues through appropriate corrective and progressive discipline.
• Lead and support organizational and operational change.
• Lead strategy and execution for the enterprise SOC technology stack, including SIEM, data lake, SOAR, detection, and threat intelligence platforms.
• Maintain and support existing security platforms while planning and executing modernization and integration efforts.
• Ensure the availability, reliability, performance, and security of enterprise security tooling and supporting infrastructure.
• Oversee security telemetry ingestion, retention, and data quality to support effective detection, analytics, and threat hunting.
• Identify and address gaps in tooling, telemetry, detection coverage, and platform capabilities.
• Direct day-to-day engineering operations supporting SOC detection, response, and analytical activities.
• Oversee configuration, integration, maintenance, and lifecycle management of security technologies in accordance with enterprise architecture and security standards.
• Lead troubleshooting, root-cause analysis, and remediation of tooling, telemetry, integration, and platform issues.
• Coordinate engineering support for incident response activities requiring specialized tooling or telemetry expertise.
• Ensure timely execution of operational, project, and engineering improvement activities.
• Partner with the SOC Manager to align engineering capabilities with analyst requirements, operational workflows, and priorities.
• Collaborate with Enterprise Architecture to ensure engineering solutions align with approved architecture standards and modernization initiatives.
• Coordinate with cybersecurity, IT, data, and other enterprise teams to support integrations, interoperability, and modernization efforts.
• Provide engineering expertise for cross-functional initiatives while coordinating priorities and dependencies with partner teams.
• Drive continuous improvement of engineering processes, platform reliability, scalability, and operational support.
• Develop and maintain engineering documentation, runbooks, procedures, and technical standards.
• Identify opportunities to improve security tooling, telemetry, detection capabilities, and analytical support.
• Support cybersecurity and SOC maturity initiatives through improved platform resilience, automation, integration, and operational effectiveness.
• Other duties as assigned.

Benefits

• The State of Florida supports a Drug-Free workplace. All employees are subject to reasonable suspicion drug testing in accordance with Section 112.0455, F.S., Drug-Free Workplace Act.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager