Senior Manager of IT & Cyber Security

OnTrac • Washington, DC

23d • $156,000 - $234,000 • Remote

About The Position

OnTrac is hiring a Senior Manager of IT & Cyber Security! Are you eager to join a dynamic and expanding company where you can both learn and make a meaningful impact? If you possess a strong sense of empathy, enjoy assisting others, thrive in a fast-paced environment, and excel at problem-solving, we encourage you to apply today to connect with a recruiter! Founded in 1986, OnTrac has evolved into the leading provider of same-day and next-day delivery services in the U.S. for premier e-commerce and product-supply businesses, including five of the largest retailers in the U.S. This position may be performed remotely in states where the company is authorized to employ individuals. The Senior Manager, CSIRT / Security Operations Center (SOC) leads and matures the organization’s cyber defense capabilities through operational excellence in security monitoring, cyber incident response, crisis management, threat intelligence, threat hunting, detection engineering, security validation, cloud and identity security operations, and security automation. This role provides strategic and operational leadership for Security Operations personnel and oversees the people, processes, technologies, budget, vendor relationships, and performance measures required to effectively detect, analyze, contain, eradicate, recover from, and learn from cybersecurity threats. The Senior Manager also ensures sustainable 24x7 coverage while driving the responsible adoption of automation and AI-enabled security operations.

Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field
• 10+ years of progressive cybersecurity experience
• 5+ years of leadership experience managing Security Operations, Incident Response, Cyber Defense, or SOC teams
• Demonstrated experience building and maturing SOC capabilities, incident response programs, and detection engineering functions
• Experience developing cybersecurity operational metrics, executive reporting, and performance dashboards, including MTTD, MTTR, KPIs, and KRIs
• Proven success implementing SIEM, EDR, SOAR, and automated or AI-assisted response capabilities
• Experience managing 24x7 staffing models, budgets, and third-party security vendors or MSSPs
• It is the responsibility of every position to understand and adhere to the security guidelines outlined in OnTrac’s Acceptable Use policy and to conduct their activities accordingly.

Nice To Haves

• Master’s degree preferred, but not required
• Preferred certifications include CISSP, CISM, GIAC GCIH, GIAC GCIA, and GMON
• Cloud security certifications such as Azure Security Engineer Associate or Microsoft Cybersecurity Architect Expert preferred

Responsibilities

• Lead daily SOC/ARC monitoring, alert triage, investigations, and incident response; manage analysts, shift leads, and incident handlers across all tiers; define Tier 1/2/3 responsibilities and escalation criteria; and establish a sustainable coverage model using follow-the-sun, dedicated shifts, or hybrid on-call rotations.
• Ensure qualified staffing and service coverage while developing organizational and workforce plans that support current and future security operations requirements.
• Build and mature incident response procedures, runbooks, and playbooks; lead cyber incident response end-to-end; coordinate countermeasures and mitigating controls; and serve as the primary escalation point for complex investigations and significant incidents.
• Coordinate high-severity incident response across IT, Legal, Communications/PR, and executive leadership; conduct post-incident reviews; lead technical and executive tabletop exercises, cyber simulations, and readiness drills; and track corrective, preventive, and remediation actions to closure.
• Develop the detection engineering and proactive threat-hunting programs; perform quality control of detection and alerting mechanisms; tune SIEM, EDR, and other security technologies to improve efficacy and reduce false positives; and align detection use cases with MITRE ATT&CK, threat intelligence, emerging threats, and organizational risks.
• Establish and report MTTD, MTTR, MTTC, detection coverage, alert fidelity, incident volume, severity trends, and analyst productivity; create SOC/ARC KPIs and KRIs; and develop executive dashboards that communicate threat trends, operational performance, and program maturity.
• Optimize security tools, processes, and SIEM/SOAR platforms to reduce analyst fatigue and accelerate response; implement AI/ML-supported triage, correlation, and investigation capabilities; define the appropriate division between automated action and human judgment; and monitor emerging agentic AI and autonomous response technologies.
• Align security operations and incident handling with applicable regulatory requirements and frameworks, including NIST CSF, NIST SP 800-61, MITRE ATT&CK, CIS Controls, ISO 27001, PCI-DSS, SOX, and HIPAA, and support related audits, assessments, and evidence-collection activities.
• Manage the SOC operating budget across tools, staffing, and managed services; oversee MSSPs, MDR providers, incident response retainers, and security technology partners; and define and enforce vendor and contract SLAs.
• Recruit, coach, mentor, and develop security operations personnel at all levels; establish career paths, training programs, skills assessments, and succession plans; and foster accountability, collaboration, innovation, continuous learning, and high performance.
• Lead the strategy and execution of major cybersecurity projects that affect multiple areas of the organization.
• Set operational objectives, policies, procedures, and work plans while delegating responsibilities effectively across the team.
• Develop, adapt, and implement policies that strengthen immediate security operations and may influence the broader organization.
• Engage effectively with frontline and senior management on issues spanning multiple functions, departments, and customers.
• Use strong persuasion and sound judgment to navigate sensitive, complex situations while maintaining productive relationships.

Benefits

• Medical, dental, and vision insurance
• Life and short- and long-term disability coverage
• 401(k) retirement savings plan with company match
• Flex vacation in states other than CA, CO, IL, MA, MT, and NE, with accruals up to 96 hours for first year of employment with tenure-based increases up to 160 hours
• Two (2) floating holidays per year
• Paid sick leave
• Six (6) paid company holidays
• Two (2) weeks paid pregnancy disability leave, four (4) weeks paid parental bonding leave
• Additional wellness and employee assistance programs

What This Job Offers

• Job Type: Full-time
• Career Level: Senior