Manager of Security Operations

Polsinelli does not accept unsolicited resumes from search firms or agencies. Please, no phone calls or emails.

At Polsinelli, What a Law Firm Should Be is not just our tagline, it is what we live every day. We strive to create an environment where our team members are encouraged to bring their creativity and professional passions into the workplace so that they can thrive. Are you a people-person who has a keen eye for detail, thrives in a professional environment and wants to be part of a dynamic team? We have the perfect role for an engaging professional like you!

Polsinelli is hiring a Manager of Security Operations for any of our offices.

POSITION SUMMARY

The Manager of Security Operations is responsible for leading and managing the organization's day-to-day cybersecurity operations, including threat detection, incident response, data loss prevention, vulnerability management, email, and securing enterprise applications.

This position provides operational leadership for the organization's security monitoring, investigation, and response capabilities while ensuring security threats and vulnerabilities are identified, assessed, prioritized, and remediated in a timely manner.

The Manager of Security Operations serves as the primary incident commander during significant cybersecurity incidents, coordinating technical response activities & cross-functional resources to minimize business disruption and organizational risk.

The successful candidate will combine strong technical cybersecurity expertise, operational discipline, leadership capabilities, and a risk-based approach to protecting the organization's information assets, technology infrastructure, and sensitive data.

EDUCATION AND EXPERIENCE

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field, or equivalent professional experience.
• Minimum of 5 years of progressive experience in cybersecurity or information security, including substantial hands-on experience in security operations, incident response, and vulnerability management.
• Demonstrated experience managing significant cybersecurity incidents and coordinating cross-functional incident response activities.
• Working knowledge of enterprise security architectures, endpoint protection, identity security, network security, cloud security, and security monitoring technologies.
• Experience developing security procedures, incident response playbooks, operational metrics, and management reporting.

TECHNICAL KNOWLEDGE AND SKILLS

• Strong understanding of incident response methodologies, digital forensics principles, and cybersecurity investigation techniques.
• Experience with SIEM, EDR/XDR, DLP, vulnerability scanning, email security, and ITSM platforms.
• Familiarity with security technologies.
• Knowledge of common attack techniques, ransomware operations, phishing, credential compromise, lateral movement, and data exfiltration.
• Understanding of vulnerability scoring and prioritization methodologies, including CVSS, CISA Known Exploited Vulnerabilities (KEV), and exploit intelligence.
• Familiarity with MITRE ATT&CK, NIST SP 800-61, NIST Cybersecurity Framework, and CIS Controls.
• Strong analytical, investigative, troubleshooting, and problem-solving skills.

PREFERRED QUALIFICATIONS

• Experience managing security operations within a professional services, legal, financial services, healthcare, or other highly regulated environment.
• Experience working with managed security service providers, MDR partners, incident response retainers, and external penetration testing firms.
• Experience developing or maturing a Security Operations Center (SOC) or security operations program.
• Familiarity with Microsoft 365, Azure, hybrid infrastructure, and cloud security monitoring.
• Experience integrating security operations processes with enterprise risk management and business continuity programs.
• Experience implementing security automation and orchestration capabilities, including SOAR platforms.
• Experience managing operational budgets, security vendors, and security technology roadmaps.

PREFERRED CERTIFICATIONS

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• GIAC Certified Incident Handler (GCIH)
• CompTIA CySA+ or equivalent technical certification

CORE COMPETENCIES

Operational Leadership: Ability to manage competing security priorities, allocate resources, establish accountability, and maintain operational effectiveness.

Incident Command: Ability to lead high-pressure cybersecurity incidents, make timely risk-based decisions, and coordinate multiple technical and business stakeholders.

Technical Expertise: Strong understanding of modern cybersecurity threats, defensive technologies, investigation methodologies, and remediation practices.

Risk-Based Decision Making: Ability to prioritize security activities based on threat exposure, business impact, and organizational risk tolerance.

Communication: Ability to deliver clear, concise, and actionable information to technical teams, business stakeholders, and executive leadership.

Process Improvement: Demonstrated ability to establish repeatable operational processes, improve security capabilities, and measure program effectiveness.

Collaboration: Ability to work effectively with technical teams, business units, leadership, and external service providers.

WORKING CONDITIONS AND EXPECTATIONS

• Must be available to provide leadership and incident command support during significant cybersecurity incidents, including outside normal business hours when necessary.
• Must exercise sound judgment and maintain strict confidentiality when handling sensitive organizational information, security investigations, and incident-related evidence.
• Must maintain current knowledge of emerging threats, evolving cybersecurity technologies, and industry best practices.

POSITION SUCCESS CRITERIA

Success in this position will be demonstrated by the ability to maintain effective security operations, improve the organization's ability to detect and respond to cybersecurity threats, reduce exposure to known vulnerabilities, prevent unauthorized disclosure of sensitive information, and establish measurable improvements in security readiness and operational maturity.

The Manager of Security Operations is expected to provide both tactical oversight and strategic operational leadership, ensuring that security activities are executed consistently, risks are communicated appropriately, and cybersecurity incidents are managed with discipline, urgency, and accountability.

The budgeted salary range for this position is $140,000 - $185,000.

As part of full-time employment associated with this position, Polsinelli PC offers the following benefits: Paid time off, sick time off, a referral program, medical insurance and benefits, dental insurance, vision insurance, life insurance, AD&D insurance, ID Theft insurance, long-term disability benefits, short-term disability benefits, Parking/Transit reimbursement (varies depending on location), 401(k) benefits, and employee assistance benefits. 

Polsinelli PC is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, or any other characteristic protected by law.