Manager-Cyber Security

CrossCountry Consulting•Dallas, TX

4d•Hybrid

About The Position

CrossCountry is seeking a technically strong Cybersecurity Manager to join its Cybersecurity & Privacy practice. This hands-on role involves cloud security architecture, security engineering, risk and compliance frameworks, and threat modeling. The manager designs, implements, and assesses security solutions across complex client environments and leads cybersecurity engagements from scoping and planning through delivery. The position is hybrid, with 60% on-site/client work and 40% remote, and includes local travel. The role covers IAM program maturity, cloud and application security, security tooling, risk assessments, security transformation, threat modeling, incident response readiness, disaster recovery, and privacy and compliance advisory. The manager also leads concurrent project workstreams, coordinates cross-functional teams, anticipates risks and dependencies, and is accountable for client satisfaction, quality, and measurable engagement outcomes.

Requirements

Bachelor’s degree in Information Systems, Computer Science, Mathematics, or a related technical field.
At least 5 years of Big 4 or related consulting/professional services experience with hands-on cybersecurity engineering and advisory expertise.
Hands-on experience with AWS, Azure, and/or GCP security services and native security tooling.
Experience with cloud-native security, including Docker, Kubernetes, infrastructure-as-code, serverless security, and CI/CD pipeline security.
Knowledge of network security, including firewalls, VPN, IDS/IPS, micro-segmentation, and zero-trust architecture.
Experience with endpoint and identity security platforms, including EDR/XDR, PAM, IAM, MFA, and SSO solutions.
Experience with vulnerability management tools such as Tenable, Qualys, Rapid7, or equivalent, and familiarity with CVSS scoring and patch prioritization.
Experience with application security, including SAST/DAST tooling, API security testing, secure SDLC practices, and code scanning platforms.
Proactive project leadership and ability to manage multiple concurrent workstreams, coordinate teams, anticipate issues, and deliver engagements independently.

Nice To Haves

CISM, CEH, OSCP, or other relevant security certifications.
Experience with tools and platforms named in the job posting, including Okta, Microsoft Entra ID, SailPoint, CyberArk, BeyondTrust, HashiCorp Vault, Kubernetes, Terraform, CloudFormation, Open Policy Agent, Checkov, Apigee, Azure API Management, AWS API Gateway, Tenable, Qualys, CrowdStrike, Splunk, Microsoft Sentinel, Palo Alto Networks, Wiz, Prisma Cloud, Zscaler, Netskope, BloodHound, Pacu, Burp Suite, ATT&CK Navigator, Atomic Red Team, ServiceNow, Recorded Future, Mandiant, Cortex XSOAR, Splunk SOAR, Microsoft Defender XDR, AWS Elastic Disaster Recovery, Azure Site Recovery, Veeam, Zerto, Snyk, Checkmarx, SonarQube, Datadog, Entra ID Protection, OneTrust, Drata, or Vanta.

Responsibilities

Assess and mature IAM programs covering identity governance, privileged access, SSO/MFA, joiner-mover-leaver processes, access reviews, and least privilege across on-premises and cloud environments.
Design cloud security architectures for AWS, Azure, and GCP, including identity federation, segmentation, encryption, and logging.
Implement security controls for containers, infrastructure-as-code, and serverless environments, including workload identity, secrets management, and policy-as-code.
Design API security standards and secure integration patterns, including OAuth 2.0/OIDC, service-to-service authentication, and gateway controls.
Conduct risk and maturity assessments using security and compliance frameworks, emphasizing identity and cloud controls.
Perform security tool gap analysis, consolidation, and implementation across vulnerability management, endpoint security, SIEM, IDS/IPS, firewalls, and cloud platforms.
Lead security transformation programs spanning architecture, implementation, and remediation, using a zero-trust, identity-centric approach.
Perform threat modeling and penetration-testing advisory, including identity-based attack paths and cloud misconfigurations.
Apply MITRE ATT&CK to map adversary techniques and inform controls and detection coverage.
Drive capability improvements across IAM, Vulnerability Management, Incident Response, IT DR, Business Continuity, Threat Intelligence, and Security Monitoring.
Assess incident response readiness, design playbooks for identity compromise and cloud incidents, and facilitate technical tabletop exercises.
Review and harden application and system disaster recovery plans, identify gaps, and develop remediation playbooks.
Engineer controls for SAST/DAST code scanning and application and infrastructure monitoring, including IAM policy analysis and identity threat detection.
Implement and advise on PCI-DSS compliance and support CCPA/CPRA and GDPR privacy audits.
Drive engagement timelines and deliverables proactively while maintaining client confidence.
Manage multiple concurrent assessment, implementation, and compliance workstreams, keeping teams organized and on schedule.
Anticipate risks, dependencies, and roadblocks and proactively propose solutions to clients and internal stakeholders.
Lead and coordinate project teams, delegate effectively, and maintain quality, accountability, and momentum.
Own engagement success from initial scoping and project planning through final delivery, taking accountability for client satisfaction, output quality, and measurable outcomes.