Senior Manager SecOps Cyber Defense

Capital Group•Charlotte, NC

1d•$187,016 - $317,927•Hybrid

About The Position

As the Senior Manager, SecOps Cyber Defense at Capital Group, you lead a unified Detection Engineering and Incident Response team within the overall SecOps/Cyber Defense organization. You define and execute a multi-year strategy aligned to Global Information Security priorities, evolving threats, and business risk appetite. You ensure strong integration across detection and response by establishing shared workflows, feedback loops, and measurable outcomes that continuously improve detection coverage and response effectiveness. You own and report on KPIs, KRIs, other metrics (e.g., MTTD, MTTR), translating technical performance into clear, business-relevant insights for executive leadership. You take ownership of the end-to-end detection and response ecosystem, including SIEM, SOAR, case management platforms, and global security operations supported by MSSP partners. You drive tool strategy, integration, and optimization while holding vendors accountable to defined SLAs, KPIs, and quality standards. You lead operational excellence across 24/7 security operations—ensuring effective monitoring, triage, investigation, containment, and remediation—while standardizing playbooks, escalation paths, and response procedures globally. You also manage budgeting and resource allocation to maximize risk reduction and ensure alignment with regulatory requirements, audit readiness, and strong governance practices. You lead and develop high-performing, globally distributed teams—including managers and senior technical leaders—fostering a culture of accountability, collaboration, and continuous improvement. You provide executive oversight during major incidents, ensuring root cause analysis is completed and lessons learned are embedded into detection logic, tooling, and response processes. You stay connected to industry forums and threat intelligence communities to proactively evolve defensive strategies. Above all, you communicate cyber defense readiness and risk posture with clarity and impact, ensuring leadership has the visibility needed to make informed decisions and strengthen organizational resilience.

Requirements

10+ years of experience in cybersecurity.
5+ years of leadership experience building, scaling, and automating high-performing operations teams, with a track record of driving accountability, engagement, and career growth.
Extensive experience leading security operations functions, including detection engineering and/or incident response, in complex enterprise environments.
Proven experience managing managers and leading global, distributed teams in a 24/7 operational model.
Strong understanding of detection and response technologies (SIEM, SOAR, NDR, EDR, CTI) and their integration within a modern security architecture.
Demonstrated ability to define and operationalize KPIs, KRIs, and MTTx metrics to drive measurable improvements in security outcomes.
Deep knowledge of incident response frameworks, threat detection methodologies, and frameworks such as MITRE ATT&CK.
Experience aligning security initiatives with business objectives and risk appetite, including executive-level communication and reporting.
Strong understanding of regulatory and compliance requirements impacting security operations.
Proven ability to manage budgets, vendors, and technology portfolios effectively.
Strong leadership, communication, and stakeholder management skills.

Nice To Haves

Bachelor’s degree in Cybersecurity, Computer Science, or a related field.
Relevant certifications such as CISSP, CISM, CRISC, or cloud security certifications (strongly preferred).

Responsibilities

Lead a unified Detection Engineering and Incident Response team.
Define and execute a multi-year strategy aligned to Global Information Security priorities, evolving threats, and business risk appetite.
Ensure strong integration across detection and response by establishing shared workflows, feedback loops, and measurable outcomes.
Own and report on KPIs, KRIs, and other metrics (e.g., MTTD, MTTR).
Take ownership of the end-to-end detection and response ecosystem, including SIEM, SOAR, case management platforms, and global security operations supported by MSSP partners.
Drive tool strategy, integration, and optimization while holding vendors accountable to defined SLAs, KPIs, and quality standards.
Lead operational excellence across 24/7 security operations—ensuring effective monitoring, triage, investigation, containment, and remediation.
Standardize playbooks, escalation paths, and response procedures globally.
Manage budgeting and resource allocation to maximize risk reduction and ensure alignment with regulatory requirements, audit readiness, and strong governance practices.
Lead and develop high-performing, globally distributed teams—including managers and senior technical leaders.
Provide executive oversight during major incidents, ensuring root cause analysis is completed and lessons learned are embedded into detection logic, tooling, and response processes.
Stay connected to industry forums and threat intelligence communities to proactively evolve defensive strategies.
Communicate cyber defense readiness and risk posture with clarity and impact.