You'll be a senior practitioner embedded in client security operations owning the processes, tools, and people that keep enterprise environments protected. This role blends deep technical delivery with team leadership, requiring someone who can operate at the analyst level, lead a cyber team, and communicate complex security matters clearly to any audience. Develop, implement, and continuously improve Cybersecurity Center processes, procedures, and policies including incident response plans, SOC workflows, and operational runbooks Work with SIEM engineers and broader security teams to develop, refine, and tune correlation rules that improve detection accuracy and reduce noise Analyze security events and provide real-time guidance to team members during investigations and active incidents Administer and manage EDR technology across Windows, macOS, and Linux environments including deployment, upgrades, agent health monitoring, policy management, and integration with SIEM and other security tools Administer and manage NDR technology developing policies, creating custom correlation rules, integrating with SIEM, and periodically reviewing configurations to propose enhancements Manage support tickets with EDR/NDR vendors and coordinate resolution as needed Leverage IR tools and solutions across the full detection, investigation, and response lifecycle Produce cyber intelligence reports that communicate technical findings clearly to information security staff, non-technical business stakeholders, and senior management Lead the cyber team day-to-day and provide on-call support outside business hours when required

Desired Candidate Profile

• Proven experience in incident response planning and execution
• Strong working knowledge of SOC policy, process, and procedure design
• Hands-on experience with SIEM platforms and correlation rule development
• Practical experience administering EDR and NDR technologies across multi-OS environments
• Solid understanding of IR tools and solutions across detection, investigation, and response
• Strong leadership skills with the ability to guide and develop a cyber team
• Excellent verbal and written communication skills able to articulate technical and strategic security matters to diverse audiences including senior management
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field
• Bonus Points Experience integrating EDR/NDR with SIEM and broader security tooling ecosystems Background in producing executive-level cyber intelligence reporting Certifications such as GIAC GCIH, GMON, GCFA, or equivalent are strongly preferred