Note: The job is a remote job and is open to candidates in USA. Froedtert Health is a regional health network operating Wisconsin's only academic medical center and Level I Trauma center. The Cybersecurity Manager for the Security Operations Team is responsible for overseeing the daily operations of the Security Operations Center, including threat detection and incident response, while managing a dedicated team to ensure compliance with security policies.
Responsibilities
- Creates a SecOps program that supports the CISO’s overall Cybersecurity Program and plans, continually assesses and matures practices and team skills to keep the organization secure
- Manages, trains, retains, and supports the Security Operations (SecOps) Team
- Manages the CyberSecurity Operations Center (CSOC) function, overseeing 24x7 monitoring, triage, and escalation of security events across the environment
- Directs incident response activities, including containment, eradication, recovery, and post-incident review, coordinating with the CISO/Deputy CISO on high-severity events
- Oversees digital forensics and investigations, including evidence collection, chain of custody, and use of forensic tooling to support HR, legal, and law enforcement inquiries
- Manages proactive threat hunting activities to identify adversary behavior not surfaced by automated alerting
- Administers and optimizes the SIEM platform, ensuring log source coverage, use-case tuning, and alert fidelity
- Oversees data loss prevention (DLP) tooling to prevent unauthorized exfiltration of patient, employee, and business data
- Manages email security tooling to defend against phishing, business email compromise, and malicious attachments/links
- Oversees CASB and secure web gateway platforms to enforce safe cloud and web usage across managed and unmanaged devices
- Evaluates and integrates security tooling where applicable to extend or consolidate the SecOps tool stack
- Develops and maintains SecOps playbooks, runbooks, and standard operating procedures
- Monitors compliance with security policies and procedures among employees, contractors, alliances, and other third parties, and takes corrective action
- Performs security risk analysis and periodic activity reviews to identify gaps in detection and response coverage
- Supports disaster recovery and business continuity testing as it relates to security monitoring and incident response readiness
- Serves as an internal SecOps consultant to the organization, advising on emerging threats and detection strategy
- Monitors advancements in security operations technologies and threat intelligence
- Monitors changes in legislation and accreditation standards that affect security operations
- Initiates, facilitates, and promotes security awareness activities related to threat detection and incident reporting
- Serves as SecOps liaison for clinical, financial, administrative, and behavioral systems, and acts as liaison to the Information Systems Department, privacy officer, and Security and Privacy Committees
- Maintains an effective Vulnerability Management Program, oversees program, tooling, contracts, and outcomes
Skills
- Bachelor's degree in information security, computer science, or a related field
- Five or more years of experience in security operations, incident response, or threat hunting
- Prior people-management or team-lead experience
- Knowledge of network infrastructure
- SIEM administration
- DLP/CASB/SWG tooling
- Email security platforms
- Digital forensics methodology
- Good presentation and communication skills
- GIAC (GCIH, GCFA, or GNFA), CISSP, or CISM certification
Benefits
- Paid time off
- Growth opportunity- Career Pathways & Career Tuition Assistance, CEU opportunities
- Academic Partnership with the Medical College of Wisconsin
- Referral bonuses
- Retirement plan - 403b
- Medical, Dental, Vision, Life Insurance, Short & Long Term Disability, Free Workplace Clinics
- Employee Assistance Programs, Adoption Assistance, Healthy Contributions, Care@Work, Moving Assistance, Discounts on gym memberships, travel and other work life benefits available
Company Overview