Meet MacStadium. We build cloud solutions to simplify Mac for business. We actively participate in and influence the Apple ecosystem in a cool way and have been a part of it since day one. Developers and end users at leading tech companies, big enterprises, and small teams rely on MacStadium’s innovative solutions every day. We have a passionate team of hard working, hard playing professionals with a big, shared vision. Come join us as we grow again!
What we need:
MacStadium is seeking an experienced Security Operations Manager responsible to oversee the day-to-day security operations of the organization, ensuring the safety and security of assets, personnel, and information. They will be responsible for developing and implementing security strategies, managing security staff and vendors, and responding to security incidents 24/7 in conjunction with our IT staff, global operations engineering team, and MDR SOC service team. A successful candidate will drive the continued maturity of our security tooling and business processes.
They will collaborate across the organization to lead vulnerability management and incident response efforts, serve as a subject matter expert for advising our staff on cybersecurity best practices and serve as a mentor to all team members within their realm of expertise. This position will require high ethical standards and a combination of technical and people skills in performing their duties, and must align their work to support the company’s objectives. This role will report to the Chief Information Security Officer (CISO), and located in Atlanta, GA.MacStadium's current U.S. office locations are in Atlanta, GA and Las Vegas, NV. While it is ideal to have this position located in close proximity to one of our offices, we are open to filling the role remotely outside of the states of GA and NV (within the United States), especially applicants in the following states: CA, CO, IL, IN, MA, MO, MS, NC, TN, TX, UT, and WI for the right candidate. For remote applicants outside of Eastern time zone, working hours will coincide with Eastern time zone hours.
What you will be doing:
- Lead MacStadium’s security operations program both tactically and strategically for continuous maturity in the following domains of the SecOps Service Catalog.
- Threat Intelligence Investigations
- Security Information & Event Management
- SOAR
- Incident Response
- Vulnerability Management
- Asset Management
- Data Loss Prevention
- Disaster Recovery Testing
- Penetration Testing
- Secrets Management
- Email, Endpoint, and Application Security Administration
- Design, configure and operate security tooling to meet corporate security requirements and support corporate security certification (SOC 2 & ISO 27001)
- Manage third party vendors in support of each of the service domains above
- Support evidence requirements for control testing in both internal and external corporate security certification assessments
- Participate in and support IT and engineering projects across the enterprise
- Develop, monitor and communicate functional KPIs and KRIs within the Security Operations domain
- Manage employee security awareness training and phishing simulation efforts
- Support MacStadium’s corporate efforts through expertise in the implementation of security controls
- Mentor and support junior team members, particularly in areas of personal expertise
- Professionally relevant duties as assigned
What Skills and Experience you need to have:
- Bachelor's degree in computer science, Information Security, Information Technology, Risk Management, Engineering, or related field required (experience and certifications may substitute for degree)
- 5+ years’ experience as a security operations manager, information security engineer, or related position
- Systems Security Certified Practitioner (SSCP), GIAC Security Essentials Certification (GSEC), and/or equivalent certification required
- Experience leading successful incident response and tabletop exercises
- Accountable to work independently with minimal supervision
- Familiarity with compliance control frameworks (e.g., ISO27001/27017/27018, SOC, GDPR, SOX or similar) a plus
- Previous experience with the following software platforms is a plus
- Rapid7 Managed Threat Complete Platform (MDR, MVM, Surface Command, Insight Connect, etc.)
- Crowdstrike Falcon
- Jamf Pro
- Microsoft Intune, Defender, and Purview
- Atlassian (Jira & Confluence)
- Delinea Secret Server
- Previous experience with AWS cloud infrastructure is a plus
What you will get:
Day one benefits. Coverage starts on day one. We offer competitive medical insurance, health and dependent care spending accounts, health savings account, disability insurance, and company paid and voluntary life insurance.Balanced life. We offer employees generous paid time-off policies, parental leave, holiday schedule, and a flexible work environment; MacStadium understands life also happens outside of work. Did we mention free company swag?Solid future. Beyond competitive salary and 401(k) matching, MacStadium offers continuing education, professional development, and wellness reimbursements.For California, Colorado, and Illinois applicants, the compensation range for this role is $100,000 to $125,000.___________________________________________________________________________________MacStadium has a defined Information Security Policy and all employees are required to adhere to this policy and sign an acknowledgment and receipt of this policy upon hire.
All offers of employment are conditioned upon successful completion of a background screening process and all employees must comply with the immigration rules and laws in the jurisdiction in which he/she/they will provide MacStadium services.MacStadium is an Equal Opportunity Employer. All applicants are considered without regard to race, color, ancestry, national origin, gender/gender identity, sexual orientation, marital and family status, religion and religious belief, age, disability, results of genetic information, and service in the military.Studies have shown that women and people of color are less likely to apply for jobs unless they believe they can perform every job description task. We are most interested in finding the best candidate for the job, and that candidate may come from a less traditional background. MacStadium may consider an equivalent combination of knowledge, skills, education, and experience to meet minimum qualifications. If you are interested in applying, we encourage you to think broadly about your background and skill set for the role.________________________________________________________________________________________________________
No recruiting agencies please.
