Cybersecurity Manager

CompoSecure•Franklin Township, NJ

2d•Onsite

About The Position

Founded in 2000, CompoSecure (NYSE: CMPO) is a technology partner to market leaders, fintechs and consumers, enabling trust for millions of people around the globe. The company combines elegance, simplicity, and security to deliver exceptional experiences and peace of mind in the physical and digital world. CompoSecure's innovative payment card technology and metal cards with Arculus security and authentication capabilities deliver unique, premium branded experiences, enable people to access and use their financial and digital assets, and ensure trust at the point of a transaction. For more information, please visit www.CompoSecure.com and www.GetArculus.com. Position Overview: We're looking for a Manager, Cybersecurity who can run our SOC operations, vulnerability management, DFIR, and security tool health - while also managing our MSSP/MDR partners, running red team engagements, and integrating cyber threat intelligence into daily operations. This is not a checkbox role. You'll be the frontline leader making sure our defenses are sharp, our partners deliver value, and our playbooks are battle-tested. The Cybersecurity Manager will be expected to work on-site five days a week in our Somerset, NJ office.

Requirements

A minimum of 7 years (or more) in cybersecurity ops, with 3+ in a lead or senior role
SOC management and vendor/MSSP oversight experience
Proven vulnerability management success across hybrid environments
Hands-on with SIEM, EDR
Solid DFIR skillset: log/memory/packet forensics, endpoint investigations, hunt operations
Experience coordinating red team engagements and actioning results
Strong communicator: can brief execs and mentor juniors

Nice To Haves

Threat intel analysis and integration experience
Cloud security ops in AWS/Azure
Certifications: GCIA, GCFA, GCIH, CISSP, CISM
Financial services or manufacturing sector experience

Responsibilities

Run day-to-day SOC ops (monitoring, alert triage, escalation)
Manage MSSP/MDR relationships - hold vendors accountable, ensure quality, and drive outcomes
Ensure 24/7 coverage through smart playbook design and partner integration
Own the vuln management lifecycle: scanning, prioritization, patching, reporting
Work with IT/DevOps to ensure remediation sticks, not just tickets get closed
Report enterprise risk posture and trendlines directly to leadership
Lead coordination of red team and purple team exercises to test resilience and validate controls
Integrate Cyber Threat Intelligence (CTI) into SOC processes - from IOCs to TTPs
Run threat hunting campaigns based on MITRE ATT&CK and emerging intel
Deploy and maintain enterprise tools (SIEM, EDR, WAF, scanners, SOAR, etc.)
Ensure tools are tuned, integrated, and delivering value - not shelfware
Explore AI/ML anomaly detection and automation opportunities to stay ahead of threats
Lead investigations end-to-end - endpoints, servers, cloud, and OT/ICS when needed
Run tabletops, refine playbooks, and ensure incident readiness
Mentor analysts in forensics, hunting, and response
Lead the professional growth of SOC analysts and cybersecurity team members through regular coaching, feedback, and development plans. Foster a culture of continuous learning and skill advancement.
Empower team members to take ownership of key initiatives, encouraging autonomy and accountability in daily operations and incident response.