1

Cybersecurity Operations Manager Jobs in Boca Raton, FL

SR. Cybersecurity Engineer

Tamarac, FL · On-site

$109K - $149K/yr

... management, incident response, and tooling, focusing first on the highest-risk areas and expanding coverage over time. Operational Prioritization and Risk Ownership • Assess security risks across ...

IT Operations Lead

Pompano Beach, FL · On-site

$100K - $109K/yr

Position: IT Operations Lead Location: Pompano Beach, FL (HYBRID) Compensation: $100,000 to $109 ... Work with the IT Security Manager to enforce cybersecurity policies. * Ensure compliance with ...

... operations, compliance, and enterprise technology teams. The ideal candidate brings a strong mix of program delivery, stakeholder management, governance, budgeting, and cybersecurity awareness. This ...

IT Manager

Boynton Beach, FL · On-site

$89K - $109K/yr

... IT operations and oversee the design, implementation, and support of critical hospital systems ... Implement, manage, and enforce cybersecurity protocols and compliance requirements for sensitive ...

IT Manager

West Palm Beach, FL · On-site

$91K - $112K/yr

... IT operations and oversee the design, implementation, and support of critical hospital systems ... Implement, manage, and enforce cybersecurity protocols and compliance requirements for sensitive ...

IAM Project/Program Manager

Palm Beach, FL · On-site

$95K - $112K/yr

Manage project operations in dynamic, fast-moving environments. Required Qualifications * 5-7 years of experience in program/project management, with a focus on IAM and cybersecurity. * Strong ...

next page

Showing results 1-20

Cybersecurity Operations Manager information

See Boca Raton, FL salary details

$29.4K

$60.2K

$112.5K

How much do cybersecurity operations manager jobs pay per year?

As of Jun 29, 2026, the average yearly pay for cybersecurity operations manager in Boca Raton, FL is $60,218.00, according to ZipRecruiter salary data. Most workers in this role earn between $38,900.00 and $73,500.00 per year, depending on experience, location, and employer.

What does a Cybersecurity Operations Manager do?

A Cybersecurity Operations Manager oversees the daily operations of an organization's cybersecurity team, ensuring that digital assets and information are protected from threats. Their responsibilities include managing incident response, monitoring security systems, developing security policies, and coordinating with other departments to ensure compliance. They also analyze potential risks and implement measures to mitigate vulnerabilities, leading efforts to detect, prevent, and respond to cyber attacks. This role requires strong leadership, technical expertise, and up-to-date knowledge of current cybersecurity threats.

What are some common challenges faced by a Cybersecurity Operations Manager, and how can they be addressed?

Cybersecurity Operations Managers often face challenges such as managing a rapidly evolving threat landscape, coordinating incident response across departments, and ensuring compliance with industry regulations. Balancing proactive security measures with the need for efficient business operations can also be demanding. These challenges can be addressed by fostering strong cross-functional communication, investing in continuous team training, and implementing robust incident response plans. Staying current with industry best practices and leveraging automation tools can further help streamline operations and enhance security posture.

What are the key skills and qualifications needed to thrive as a Cybersecurity Operations Manager, and why are they important?

To thrive as a Cybersecurity Operations Manager, you need a solid background in information security principles, risk management, and incident response, typically supported by a degree in computer science or a related field and relevant cybersecurity certifications. Familiarity with security information and event management (SIEM) tools, intrusion detection systems (IDS), and compliance frameworks such as NIST and ISO 27001 is crucial. Strong leadership, decision-making, and communication skills distinguish top performers in this role. These competencies are essential for effectively protecting organizational assets, managing security teams, and ensuring a proactive stance against evolving threats.

Can you make $500,000 a year in cyber security?

Cybersecurity Operations Managers with extensive experience, advanced certifications, and leadership roles in large organizations can potentially earn $500,000 or more annually, especially with bonuses and stock options. Achieving this level typically requires a combination of technical expertise, strategic oversight, and years of industry experience.

What is the difference between Cybersecurity Operations Manager vs Security Analyst?

AspectCybersecurity Operations ManagerSecurity Analyst
CertificationsCISSP, CISM, CompTIA Security+CompTIA Security+, GIAC Security Essentials
Work EnvironmentOversees security teams, manages security operationsMonitors security systems, analyzes threats
Employer & Industry UsageUsed in organizations with dedicated security teamsCommon in security monitoring roles across industries

The Cybersecurity Operations Manager focuses on leading security teams and managing overall security operations, while the Security Analyst primarily monitors security systems and analyzes threats. Both roles require relevant certifications and are vital in maintaining organizational security, but they differ in scope and responsibilities.

What does a cyber security operations manager do?

A cybersecurity operations manager oversees an organization’s cybersecurity team and processes to protect systems and data from cyber threats. They monitor security alerts, coordinate incident response, implement security policies, and ensure compliance with industry standards, often using tools like SIEM systems. Strong leadership, technical knowledge, and certifications such as CISSP or CISM are typically required for this role.

Can I make $200,000 a year in cyber security?

Cybersecurity Operations Managers with extensive experience, advanced certifications, and leadership responsibilities can earn $200,000 or more annually, especially in high-demand industries or large organizations. Achieving this salary often requires strong technical skills, strategic planning, and managing complex security programs.

What is the 80 20 rule in cyber security?

In cybersecurity, the 80/20 rule suggests that approximately 80% of security issues are caused by 20% of vulnerabilities or threats. As a cybersecurity operations manager, focusing on the most critical vulnerabilities and implementing prioritized controls can significantly improve security posture and incident response efficiency.
What cities near Boca Raton, FL are hiring for Cybersecurity Operations Manager jobs? Cities near Boca Raton, FL with the most Cybersecurity Operations Manager job openings:
Infographic showing various Cybersecurity Operations Manager job openings in Boca Raton, FL as of June 2026, with employment types broken down into 67% Full Time, and 33% Part Time. Highlights an 100% In-person job distribution, with an average salary of $60,218 per year, or $29 per hour.
IT Security Analyst (USI5) (1512)

IT Security Analyst (USI5) (1512)

VSE Corporation

Miramar, FL • On-site

Full-time

Posted 2 days ago


Key responsibilities

  • Own the triage and investigation of all security alerts and incidents in alignment with the Incident Response framework, serving as the primary responder and escalation point in coordination with the managed SOC partner.

  • Perform advanced analysis of security alerts from multiple sources to identify true positives, detect emerging threats, and recommend containment and remediation strategies.

  • Manage and maintain endpoint, email, and cloud security platforms, ensuring configurations, policies, and rules are optimized for evolving threats.


Job description

About the VSE IT Team
We are a customer-driven global IT organization providing innovative, secure, and reliable technology to empower the growth of tomorrow. As part of the security team, you will defend the systems, data, and relationships that make that growth possible, building the cyber resiliency our customers and partners depend on to keep aircraft flying.
SUMMARY: The IT Security Analyst II serves as the primary internal responder and a critical member of VSE's cybersecurity defense team, responsible for proactive threat detection, in-depth analysis, and end-to-end incident response. This hands-on role owns the discovery, triage, investigation, and resolution lifecycle for all alerts escalated by VSE's managed SOC partner, driving containment and remediation while coordinating with IT, Security, Application, Service Desk, and Infrastructure teams to minimize business impact. The IT Security Analyst II acts as a subject matter expert for key security technologies and plays a key role in continuously improving VSE's overall security posture across its aviation aftermarket, distribution, manufacturing, and MRO operations.
DUTIES & RESPONSIBILITIES:
Responsibilities include, but are not limited to:
  • Own the triage and investigation of all security alerts and incidents in alignment with VSE's Incident Response (IR) framework, serving as the primary responder and escalation point in coordination with VSE's managed SOC partner.
  • Perform advanced analysis of security alerts from multiple sources to identify true positives, detect emerging threats, and recommend containment and remediation strategies.
  • Serve as the primary point of contact for escalated incidents from Tier I analysts and managed SOC partners.
  • Own and continuously improve the incident response playbooks, ensuring procedures evolve with threat intelligence and adversarial trends.
  • Develop and implement SIEM use cases, correlation rules, and dashboards to improve detection accuracy and operational efficiency.
  • Manage and maintain endpoint, email, and cloud security platforms - ensuring configurations, policies, and rules are optimized for evolving threats.
  • Conduct phishing simulations and user behavior analysis; lead targeted awareness campaigns for high-risk groups.
  • Perform root cause analysis for recurring incidents and propose technical or procedural remediation plans.
  • Collaborate closely with Network, Infrastructure, and Cloud teams to harden environments and ensure consistent enforcement of security controls.
  • Support security audits, penetration testing activities, and red/blue/purple team exercises - driving follow-up actions to closure.
  • Generate metrics, reports, and trend analysis to inform leadership and support continuous improvement initiatives.
  • Act as the technical lead for specific security domains (e.g., SOAR/SIEM operations, incident response).
  • Guide team members in threat analysis and incident handling.
  • Contribute to policy and process development, ensuring alignment with regulatory frameworks and industry best practices.
  • Lead post-incident reviews and lessons-learned sessions to improve detection and response maturity.
  • Other duties as assigned.

MINIMUM REQUIREMENTS:
  • Bachelor's degree in computer science, information security, or a related field; or equivalent combination of education, technical certifications, and relevant experience.
  • Minimum of 4-6 years of experience in cybersecurity operations, incident response, or related security domains.
  • Proven hands-on experience with SIEM, SOAR, EDR, and email security technologies.
  • Strong analytical skills and the ability to correlate logs across multiple systems to identify patterns and potential compromises.
  • Proficient with scripting languages such as PowerShell, Python, or like automate investigative tasks.
  • Working knowledge of Azure and Microsoft 365 security stacks, including Entra, Defender for Cloud, and Intune.
  • Understanding of cloud security principles (SaaS, PaaS, IaaS) and identity management concepts (MFA, PKI, RBAC).
  • Excellent communication, documentation, and interpersonal skills; able to articulate complex technical issues to non-technical stakeholders.
  • Ability to work independently, prioritize tasks effectively, and make sound decisions in high-pressure scenarios.
  • Engage directly with end users following a triggered security event (e.g., phishing link clicked, or malware executed), investigate the sequence of actions, determine scope, and impact, and communicate required next steps to the user and response team.
  • Coordinate with IT and infrastructure teams to isolate affected endpoints, remove them from the network, ensure account integrity, provide replacement assets if needed, and restore user productivity while minimizing business disruption.
  • Design and deliver targeted remedial training or awareness follow-up to users when security incidents occur, helping to reduce repeat events and strengthen the human element of defense.

PREFERRED REQUIREMENTS:
  • Master's degree
  • CompTIA Security+ CE (required); additional advanced certifications such as CySA+, CASP+, or SANS (GCIA, GCIH, GMON) are strongly preferred.
  • Experience in tuning SIEM detections and authoring correlation rules.
  • Hands-on experience with Sentinel One, CrowdStrike, or similar EDR services
  • Experience conducting or participating in tabletop and red/purple team exercises.
  • Familiarity with MITRE ATT&CK framework and cyber kill chain analysis.
  • Familiarity with NIST CSF, 800-171, ISO 27001 or similar frameworks.
  • Demonstrated success leading cross-functional initiatives or incident response efforts.

OTHER:
  • Participation in on-call rotation for after-hours incident escalation.
  • Occasional travel may be required.
  • The selected applicant will be subject to a background check and drug testing.

Equal Opportunity/Affirmative Action Employer. VSE considers candidates regardless of race, color, religion, gender, sexual orientation, gender identity, national origin, disability or veteran status, or any other characteristic protected by law.