Cyber Security Operations Engineer Jobs (NOW HIRING)

The NFL Cybersecurity Operations team is responsible for safeguarding the organization's digital assets by ensuring the confidentiality, integrity, and availability of critical data, systems, and services. Through continuous monitoring, rapid incident response, and proactive threat management, the team defends the enterprise against an evolving cyber threat landscape.

We are seeking a Senior Manager, Cybersecurity Operations to lead the NFL's Cybersecurity Operations Center (CSOC). This leader will oversee the Cybersecurity Operations program and drive the continued evolution of our 24x7x365 security operations capability, transforming it from a primarily reactive, alert-driven function into a proactive, intelligence-led, and highly automated cyber defense program.

Reporting as a key leader within the cybersecurity organization, this individual will help define and execute the strategic vision for the "CSOC of the Future," where they will shape the operating model, technology strategy, and roadmap by leveraging automation, orchestration, agentic AI, advanced analytics, and emerging security capabilities to strengthen cyber resilience, enhance threat detection and response, and improve operational effectiveness across the enterprise.

Responsibilities:

• Lead the day-to-day operations and strategic direction of the 24/7/365 Cybersecurity Operations Center (CSOC).
• Lead incident response activities for high-priority cybersecurity events and oversee post-incident reviews and continuous improvement.
• Expand proactive threat hunting using threat intelligence, behavioral analytics, and AI-assisted investigations.
• Working closely with IT infrastructure, cloud, engineering, risk, and business leaders, this individual will help to define and deliver the future state of cybersecurity operations, ensuring the organization can rapidly detect, investigate, and respond to threats while maximizing productivity and reducing operational complexity.
• Collaborate with third-party security providers and managed security service providers (MSSP)s to optimize service delivery and operational effectiveness.
• Support major business events and critical operations by ensuring continuous monitoring and rapid incident response capabilities.

Lead the SOC of the Future

• Develop and execute the strategic roadmap for a modern Cybersecurity Operations Center built on automation, orchestration, AI, and agentic AI.
• Define the future operating model for security operations, balancing human expertise with autonomous security capabilities.
• Champion continuous modernization initiatives that improve resilience, scalability, and analyst effectiveness.

AI, Automation & Orchestration Strategy

• Develop and execute the roadmap for a modern, AI-enabled SOC focused on automation, orchestration, and continuous operational improvement.
• Develop playbooks and orchestrated workflows using SOAR technologies to improve consistency, speed, and scalability.
• Leverage agentic AI and machine learning to automate repetitive analyst tasks, improve triage accuracy, alert enrichment, response actions, accelerate investigations, and enable autonomous response where appropriate.
• Identify opportunities to eliminate operational inefficiencies through intelligent automation and workflow optimization.
• Sponsor development of automation playbooks and integrations across the cybersecurity technology stack.

Operational Excellence

• Lead, mentor, and develop a high-performing cybersecurity operations team while fostering innovation and continuous learning.
• Lead Security Operations, Detection Engineering, Incident Response, Threat Hunting, and Security Automation teams.
• Establish KPIs that measure operational maturity, automation effectiveness, analyst productivity, detection quality, and response performance.
• Drive continuous improvement in Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), alert fidelity, and analyst capacity through technology optimization.

Security Technology Strategy

• Drive integration and optimization of SIEM, SOAR, XDR, EDR, Threat Intelligence, Vulnerability Management, Identity Security, Cloud Security, Email Security, and Network Security
• Build detection engineering capabilities that continuously improves visibility across the enterprise including cloud, endpoints, network, email, and SaaS environments.
• Evaluate emerging cybersecurity technologies and recommend investments that improve operational capability and efficiency.

Strategic and Technical Leadership

• Present cybersecurity operational maturity, modernization progress, and risk metrics to executive leadership through dashboards and operational reporting communicating cyber risk, operational performance, and program maturity.
• Partner with cybersecurity architecture, security engineering and IT teams to operationalize new security technologies and maximize value through integration and automation.
  Work with Information Security Office leadership team and other stakeholders to develop multi-year investment strategies for cybersecurity operations technologies and workforce transformation.
• Partner with business leaders to align cybersecurity operations with organizational objectives and enterprise resilience.

Talent Development

• Build and mentor a high-performing cybersecurity operations organization capable of operating an AI-enabled SOC.
• Develop new skills within the team around automation engineering, AI-assisted investigations, detection engineering, and advanced threat hunting.
• Foster a culture of innovation, continuous learning, and operational excellence.

Required Qualifications:

• 8-10+ years professional experience in cybersecurity, network engineering or large-scale enterprise IT operations
• At least 3-5+ years in a dedicated management or leadership role.
• Hands-on background in incident response, risk management, security architecture, and Security Operations Center (SOC) optimization
• Direct supervisory responsibilities of contract employees and/or managed security services
• Bachelor's degree (B.S. or B.A.) in Cybersecurity, Computer Science, Information Technology, or similar required
• Master's degree (M.S. in Cybersecurity, Information Security, or an MBA with an IT/Security concentration) is strongly preferred

Technical Skills:

• Technical expertise in cybersecurity tools, technologies, and security strategies.
• Cybersecurity Operations Tooling: Advanced knowledge of AI, SIEM, SOAR, EDR/XDR, and Next-Gen Firewalls.
• Must possess advanced technical skills that can shift from daily hands-on to architecture design, technical and defensive engineering.
• Cyber Threat Management & Hunting using advanced threat intelligence frameworks like MITRE ATT&CK and threat intelligence integrations.
• Strong understanding of network and systems both hybrid-cloud security (AWS, Azure,) and on-premises infrastructure.
• Forensic understanding to guide analysts and preserve strict chains of custody for legal teams.

Other Key Attributes / Characteristics

• Confident, self-motivated, with strong interpersonal skills and ability to interface with, and gain the respect of, stakeholders at all levels of NFL.
• Continuously prove and demonstrate good judgment and commitment to high standards of ethics, regulatory compliance, customer service and business integrity.
• Excellent verbal, written and interpersonal communication skills, including the ability to communicate effectively with the IT organization, project and application development teams, management, and business personnel.
• Strong decision-making capabilities. Calm under pressure during high-stress cyber events.
• An understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business.
• An understanding of organizational mission, values and goals and consistent application of this knowledge.

Professional Certifications (Preferred; not required)
CISSP (Certified Information Systems Security Professional)
CISM (Certified Information Security Manager)
GSOM (GIAC Security Operations Manager)

Terms / Expected Hours of Work

Travel domestically and internationally is required for this position. While frequency and duration of travel will vary throughout the year, applicants should anticipate approximately 15%-20% travel.

Salary / Pay Range

This job posting contains a pay range, which represents the range of salaries or hourly rates that the NFL believes, in good faith, at the time of this posting that it might be willing to pay for the posted job in the location(s) specified. The NFL expects to hire for this position near the middle of the range. Only in truly rare and exceptional circumstances, where an external candidate has experience, credentials or expertise that far exceed those required or expected for the position, would the NFL consider paying a salary or rate near the higher end of the range.