Cybersecurity Operations Manager / Technical Account Manager (TAM)
Location
San Diego, California
Duration:
12 months
Position Summary
We are seeking an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) to serve as the onsite liaison among client partners. This 12-month role will lead operational oversight of CrowdStrike services, including implementation, adoption, governance, and daily coordination.
The resource will coordinate implementation through steady-state support, serving as the central contact for Falcon Complete, CTEM, Falcon Guardian / AIDR, service reviews, and escalations.
Primary Objectives During the First Year
-
Lead the successful implementation and onboarding of CrowdStrike services.
-
Establish governance, operational reviews, escalation paths, and service-management processes.
-
Manage CTEM operations and remediation coordination.
-
Manage Falcon Guardian / AIDR administration and operating processes.
-
Assist ICW in maturing security operations and incident-response processes.
-
Complete knowledge transfer and operational-readiness documentation before the end of the assignment.
Key
Responsibilities
CrowdStrike Service Management
-
Act as the primary operational liaison for Falcon Complete service matters.
-
Coordinate critical-incident communications, follow-up actions, and closure.
-
Ensure recommendations are assigned, tracked, and resolved by the appropriate team.
Security Operations and GSI Coordination
-
Coordinate implementation workstreams, dependencies, risks, and delivery with the client as the GSI.
-
Maintain accountability through documented owners, due dates, actions, and escalations.
-
Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams.
CTEM and Falcon Guardian / AIDR
-
Lead day-to-day administration and operating processes for CTEM and Falcon Guardian / AIDR.
-
Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement.
-
Integrate findings into ICW workflows and partner with asset owners to reduce risk.
Governance, Reporting, and Transition
-
Lead weekly operational and monthly service reviews.
-
Maintain a RAID log covering risks, assumptions, issues, and dependencies.
-
Create executive dashboards and concise status reporting.
-
Maintain the roadmap, RACI, escalation model, and transition plan.
Deliverables During the Engagement
-
Implementation oversight, deployment coordination, and operational transition plan.
-
Security-operations governance framework, cadence, RACI, and escalation model.
-
Executive dashboards, monthly service reviews, and action tracking.
-
Incident-escalation and stakeholder-communication process.
-
CTEM remediation tracking and Falcon Guardian / AIDR operating procedures.
-
RAID log and remediation-status reporting.
-
Knowledge-transfer and operational-readiness documentation.
Required Experience and Qualifications
-
10+ years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services.
-
5+ years leading enterprise SOC, MDR, incident-response, or managed-security programs.
-
3+ years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian / AIDR.
-
Experience in a senior client-facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager.
-
Proven coordination across customers, cybersecurity vendors, and global systems integrators during implementation and operations.
-
Experience with critical escalations, governance, executive reporting, service reviews, and cross-functional remediation.
-
Strong communication skills and the ability to translate technical issues into business impact and clear actions.
Preferred Technical Experience
-
CrowdStrike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Guardian / AIDR, Falcon Next-Gen SIEM, and Falcon OverWatch.
-
Security incident response, threat hunting, detection engineering, vulnerability and exposure management, and SOC operations.
-
ServiceNow and Jira workflows; Microsoft Intune, SCCM, BigFix, or comparable endpoint-deployment tools.
-
Identity platforms such as Microsoft Entra ID, Active Directory, and Okta.
-
Cloud environments including Microsoft Azure, Amazon Web Services, or Google Cloud.
-
Working knowledge of NIST Cybersecurity Framework, MITRE ATT&CK, CIS Controls, ISO/IEC 27001, and ITIL practices.
Cybersecurity and Leadership
-
CISSP - Certified Information Systems Security Professional.
-
CISM - Certified Information Security Manager.
-
CCSP - Certified Cloud Security Professional.
-
GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), or comparable GIAC certification.
-
CompTIA Security+ for candidates whose broader experience demonstrates senior-level capability.
CrowdStrike
-
CrowdStrike Certified Falcon Administrator (CCFA).
-
CrowdStrike Certified Falcon Responder (CCFR).
-
CrowdStrike Certified Falcon Hunter (CCFH).
-
Other current CrowdStrike credentials relevant to Falcon Complete, identity, exposure management, or Next-Gen SIEM.
Program and Service Management
-
PMP - Project Management Professional.
-
ITIL 4 Foundation or advanced ITIL certification.
-
Microsoft Certified: Security Operations Analyst Associate or Cybersecurity Architect Expert.
