Note: The job is a remote job and is open to candidates in USA. Cast & Crew is an entertainment technology and services provider supporting payroll, financial operations, and creative tools for the global entertainment industry. The Security Operations Manager will lead the security operations team, establish operational strategy, oversee monitoring and incident response, and protect endpoints, identities, email, and corporate data. The role also involves team development, security governance, cross-functional collaboration, and continuous improvement of the organization’s security posture.
Responsibilities
- Develop and execute a comprehensive security operations strategy aligned with business objectives and risk tolerance
- Define the roadmap for security monitoring, detection, and response capabilities across the enterprise
- Partner with IT and infrastructure teams to embed security monitoring and controls across the systems they own and administer
- Establish and mature incident response processes, playbooks, and escalation procedures
- Own the operational security metrics—detection and response times, endpoint coverage and compliance, phishing resilience—that feed our established executive security KPI program, reporting progress to the CISO
- Participate in proofs of concept and design partnerships with emerging security vendors — particularly AI-driven technologies — helping evaluate new products and shape their roadmaps alongside security leadership
- Lead, mentor, and develop a team of security analysts and engineers
- Foster a collaborative, learning-oriented team culture that balances security rigor with operational efficiency
- Conduct regular 1:1s, performance reviews, and career development planning for direct reports
- Scale the team as the organization grows, including hiring and onboarding new security talent
- Provide technical guidance and remove blockers to enable your team's success
- Oversee security monitoring and SIEM operations, ensuring effective detection and alerting
- Lead incident response efforts, conducting investigations, root cause analysis, and implementing preventive measures
- Serve as the escalation point for critical and after-hours security incidents, and manage on-call rotations and escalation workflows for the team
- Manage endpoint detection and response (EDR) platforms and endpoint security posture
- Oversee email security operations including anti-phishing, anti-malware, and email gateway management
- Lead security awareness and training programs to reduce human risk factors
- Develop and maintain incident response playbooks, runbooks, and tabletop exercises
- Manage day-to-day operational relationships with security tooling vendors and managed service providers
- Define identity security policy and standards — single sign-on (SSO), multi-factor authentication (MFA), and conditional access requirements — for the identity platforms administered by IT
- Monitor user and permissions hygiene across the enterprise, including joiner/mover/leaver lifecycle and least-privilege enforcement, driving remediation with IT
- Lead periodic access reviews and certification campaigns in partnership with IT and GRC
- Work closely with IT and infrastructure teams to ensure security tools integrate effectively with enterprise systems
- Partner with the GRC team on SOC 2 compliance requirements related to security operations, including control evidence and audit support
- Collaborate with the Product Security team on monitoring, detection, and response for application-layer threats
- Communicate security risks, incidents, and priorities effectively to both technical and non-technical stakeholders
Skills
- 7+ years of experience in security operations, incident response, or related security roles, including 3+ years directly managing security teams (hiring, performance management, and career development)
- Deep technical expertise in at least two of the following areas: + Security Information and Event Management (SIEM) administration and log analysis + Incident response and digital forensics + Endpoint detection and response (EDR) platforms + Email security and anti-phishing technologies + Identity security and governance, including IdP policy design (e.g., Okta, Microsoft Entra ID), SSO/MFA/conditional access, and access lifecycle governance + Security awareness and training program management
- Strong understanding of common attack vectors, threat intelligence, and detection methodologies
- Experience developing and executing incident response playbooks and tabletop exercises
- Excellent communication skills with the ability to explain complex security concepts to diverse audiences
- Bachelor's degree in Computer Science, Information Security, or related field (or equivalent practical experience)
- Sedentary – Involves sitting most of the time but may involve walking or standing for brief periods of time. Some positions may entail exerting up to 15 lbs. of force occasionally and/or a negligible amount of force to lift, carry, push, or pull
- Travel up to 5%
- Industry certifications such as CISSP, GCIH, GCFA, GCIA, or Security+
- Experience in regulated industries (finance, healthcare, entertainment) with compliance requirements
- Familiarity with SOAR platforms and security automation
- Experience with cloud security monitoring (AWS, Azure)
- Knowledge of threat hunting and proactive detection techniques
- Experience managing managed security service provider (MSSP) relationships
- Experience supporting SOC 2 audits
- Experience with proofs of concept or design partnerships with emerging security vendors, particularly AI-based tooling
Benefits
- Medical, subject to eligibility requirements
- Dental, subject to eligibility requirements
- Vision, subject to eligibility requirements
- PTO, subject to eligibility requirements
- Health and wellness programs, subject to eligibility requirements
- Employee discounts, subject to eligibility requirements
Company Overview
Company H1B Sponsorship