Job Description

Lead of Cybersecurity Operations

Employment Type: Contract-to-Hire (6 months+)

Location: Richardson, TX (Hybrid 3 days onsite/week)

Start Date: ASAP

Rate: Open (Hourly + Salary expectations required)

Priority: Top candidates only

Key Highlights

• Hybrid role (3 days onsite)
• Open on compensation submit best fit with hourly rate and salary expectations
• Salary to be finalized during intake call

Hiring Manager Notes (Updated 1/20/2026)

• Strong Digital Forensics & Incident Response (DFIR) experience
• Proven leadership / player-coach background
• Experience with cloud environments (AWS preferred) and hybrid infrastructure
• Patch management experience
• Preferred certifications: CISSP, GCIA, GCIH , or equivalent
• Supporting 24/7 operations
• Cloud migration currently in progress

Role Summary

The Lead of Cybersecurity Operations is a hands-on, strategic leader responsible for managing day-to-day cybersecurity operations. This role focuses on threat detection, incident response, vulnerability management, and third-party patching within a hybrid cloud environment.

The ideal candidate can investigate a compromised system, perform forensic analysis, and deliver a detailed DFIR report explaining what happened, how it happened, when it occurred, and attacker dwell time .

Key Responsibilities

• Lead Cybersecurity Operations team (SOC, Incident Response, Vulnerability Management)
• Oversee threat detection and response using:
  • CrowdStrike Falcon Complete
  • Rapid7 InsightIDR
  • Proofpoint
• Own third-party patch management strategy and execution
  • Tools may include PDQ Connect, Patch My PC, Microsoft EAM
• Coordinate vulnerability scanning, prioritization, and remediation
• Develop and maintain playbooks and SOPs aligned with ISO 27001, NIST, CIS
• Partner with IT, DevOps, and Application teams for secure deployments
• Track KPIs and operational metrics
• Support audits, risk assessments, and compliance initiatives
• Mentor team members and promote a culture of accountability and innovation

Mandatory Qualifications

• 8+ years in cybersecurity operations (SOC, IR, vulnerability management)
• 3+ years in a leadership or team lead role
• Strong DFIR experience (host, memory, network forensics)
• Experience with enterprise security tools:
  • CrowdStrike, Rapid7, Proofpoint, Code42
• Patch management experience (PDQ, Intune, Patch My PC)
• Strong knowledge of ISO 27001, NIST CSF, CIS
• Experience with AWS and hybrid environments
• Excellent communication, leadership, and analytical skills

Nice-to-Have

• Certifications: CISSP, GCIA, GCIH , or equivalent
• Experience leading teams through cloud migrations
• Strong problem-solving and collaboration skills

Job Tags

Hourly pay, Contract work, Immediate start, 3 days per week,

Similar Jobs