Senior Manager of Security Operations & Engineering

Jacobs is a leading company involved in cybersecurity, infrastructure, data, applications, and cloud technologies. The role is within the Security Operations function, overseeing the SOC Manager and the Tier 3 Operations Engineering team responsible for SIEM platform and security tech stack.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• 8+ years of experience in Security Operations, Incident Response, Security Engineering, or Cyber Defense, including leadership of operational and/or engineering teams.
• Proven experience leading 24/7 SOC environments and managing security analysts and engineering teams.
• Deep expertise with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, Google Chronicle, or Exabeam.
• Strong knowledge of SOAR, EDR/XDR, NDR, IDS/IPS, threat intelligence platforms, vulnerability management solutions, and cloud security tools.
• Solid understanding of incident response, threat hunting, detection engineering, MITRE ATT&CK, and frameworks like NIST and ISO 27001.
• Experience implementing security automation and orchestration initiatives.
• Experience defining technology roadmaps, managing vendors, budgets, and enterprise security platforms.
• Excellent stakeholder management and communication skills.
• Strong leadership abilities including mentoring, organizational change, and continuous improvement.
• Experience in complex, global, or highly regulated enterprise environments.

Nice to have:

• Experience with AI and machine learning in security operations such as anomaly detection and AI-assisted investigations.
• Familiarity with generative AI and LLM-based security use cases.
• Understanding of AI governance, model risk, data privacy, and security-specific AI threats.
• Relevant certifications including CISSP, CISM, GIAC, GSOC, Splunk, Microsoft Sentinel (SC-200), cloud security certifications (AWS/Azure/GCP), or project/program management (PMP, Agile/Scrum).

• Lead and develop Security Operations and Security Engineering teams to ensure effective 24/7 monitoring, incident response, escalation management, and continuous service improvement.
• Own the strategy, performance, and operational excellence of the organization's SOC, including staffing, talent development, process optimization, and service delivery metrics.
• Oversee the security technology ecosystem, including SIEM, SOAR, EDR/XDR, threat intelligence, vulnerability management, and related monitoring platforms.
• Drive detection engineering initiatives by improving detection coverage, log onboarding, content management, threat hunting capabilities, and security monitoring effectiveness.
• Define and execute the SOC automation and AI strategy, leveraging emerging technologies to improve threat detection, investigation, response, and analyst productivity.
• Serve as an escalation point for major security incidents, coordinating response efforts across security, engineering, IT, and business stakeholders.
• Establish and monitor operational KPIs, SLAs, and performance metrics to continually improve security operations and incident response outcomes.
• Manage vendor relationships, technology roadmaps, budgets, and platform investments to ensure scalable and cost-effective security operations.
• Partner closely with Security Architecture, Risk, Compliance, Engineering, and Data teams to maintain strong security controls, governance, and regulatory readiness.
• Stay informed on emerging cyber threats, industry trends, and AI advancements to drive innovation across security operations.

As a Disability Confident employer, Jacobs will interview all disabled applicants meeting vacancy criteria. Support and reasonable adjustments for recruitment process available on request.