Job Description
Cybersecurity Operations Manager / Technical Account Manager (TAM)
\n
\n
Location: San Diego, California
\n
Duration: 12 months
\n
\n
Position Summary
\n
We are seeking an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) to serve as the onsite liaison among client partners. This 12-month role will lead operational oversight of CrowdStrike services, including implementation, adoption, governance, and daily coordination.
\n
The resource will coordinate implementation through steady-state support, serving as the central contact for Falcon Complete, CTEM, Falcon Guardian / AIDR, service reviews, and escalations.
\n
\n
Primary Objectives During the First Year
\n
· Lead the successful implementation and onboarding of CrowdStrike services.
\n
· Establish governance, operational reviews, escalation paths, and service-management processes.
\n
· Manage CTEM operations and remediation coordination.
\n
· Manage Falcon Guardian / AIDR administration and operating processes.
\n
· Assist ICW in maturing security operations and incident-response processes.
\n
· Complete knowledge transfer and operational-readiness documentation before the end of the assignment.
\n
\n
Key Responsibilities
\n
CrowdStrike Service Management
\n
· Act as the primary operational liaison for Falcon Complete service matters.
\n
· Coordinate critical-incident communications, follow-up actions, and closure.
\n
· Ensure recommendations are assigned, tracked, and resolved by the appropriate team.
\n
\n
Security Operations and GSI Coordination
\n
· Coordinate implementation workstreams, dependencies, risks, and delivery with the client as the GSI.
\n
· Maintain accountability through documented owners, due dates, actions, and escalations.
\n
· Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams.
\n
\n
CTEM and Falcon Guardian / AIDR
\n
· Lead day-to-day administration and operating processes for CTEM and Falcon Guardian / AIDR.
\n
· Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement.
\n
· Integrate findings into ICW workflows and partner with asset owners to reduce risk.
\n
\n
Governance, Reporting, and Transition
\n
· Lead weekly operational and monthly service reviews.
\n
· Maintain a RAID log covering risks, assumptions, issues, and dependencies.
\n
· Create executive dashboards and concise status reporting.
\n
· Maintain the roadmap, RACI, escalation model, and transition plan.
\n
\n
Deliverables During the Engagement
\n
· Implementation oversight, deployment coordination, and operational transition plan.
\n
· Security-operations governance framework, cadence, RACI, and escalation model.
\n
· Executive dashboards, monthly service reviews, and action tracking.
\n
· Incident-escalation and stakeholder-communication process.
\n
· CTEM remediation tracking and Falcon Guardian / AIDR operating procedures.
\n
· RAID log and remediation-status reporting.
\n
· Knowledge-transfer and operational-readiness documentation.
\n
Required Experience and Qualifications
\n
· 10+ years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services.
\n
· 5+ years leading enterprise SOC, MDR, incident-response, or managed-security programs.
\n
· 3+ years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian / AIDR.
\n
· Experience in a senior client-facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager.
\n
· Proven coordination across customers, cybersecurity vendors, and global systems integrators during implementation and operations.
\n
· Experience with critical escalations, governance, executive reporting, service reviews, and cross-functional remediation.
\n
· Strong communication skills and the ability to translate technical issues into business impact and clear actions.
\n
\n
Preferred Technical Experience
\n
· CrowdStrike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Guardian / AIDR, Falcon Next-Gen SIEM, and Falcon OverWatch.
\n
· Security incident response, threat hunting, detection engineering, vulnerability and exposure management, and SOC operations.
\n
· ServiceNow and Jira workflows; Microsoft Intune, SCCM, BigFix, or comparable endpoint-deployment tools.
\n
· Identity platforms such as Microsoft Entra ID, Active Directory, and Okta.
\n
· Cloud environments including Microsoft Azure, Amazon Web Services, or Google Cloud.
\n
· Working knowledge of NIST Cybersecurity Framework, MITRE ATT&CK, CIS Controls, ISO/IEC 27001, and ITIL practices.
\n
Cybersecurity and Leadership
\n
· CISSP - Certified Information Systems Security Professional.
\n
· CISM - Certified Information Security Manager.
\n
· CCSP - Certified Cloud Security Professional.
\n
· GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), or comparable GIAC certification.
\n
· CompTIA Security+ for candidates whose broader experience demonstrates senior-level capability.
\n
CrowdStrike
\n
· CrowdStrike Certified Falcon Administrator (CCFA).
\n
· CrowdStrike Certified Falcon Responder (CCFR).
\n
· CrowdStrike Certified Falcon Hunter (CCFH).
\n
· Other current CrowdStrike credentials relevant to Falcon Complete, identity, exposure management, or Next-Gen SIEM.
\n
Program and Service Management
\n
· PMP - Project Management Professional.
\n
· ITIL 4 Foundation or advanced ITIL certification.
\n
· Microsoft Certified: Security Operations Analyst Associate or Cybersecurity Architect Expert.