ZipRecruiter

Log In

1

Security Operations Lead Jobs (NOW HIRING)

Steampunk

Cybersecurity Operations Lead

Mclean, VA · On-site

This role provides technical and operational leadership for security operations teams, driving ... Lead day-to-day cybersecurity operations supporting enterprise information systems. * Manage and ...

New

Steampunk

Cybersecurity Operations Lead

Mclean, VA

$125K/yr

This role provides technical and operational leadership for security operations teams, driving ... Lead day-to-day cybersecurity operations supporting enterprise information systems. * Manage and ...

New

Steampunk

Cybersecurity Operations Lead

Mclean, VA · On-site

This role provides technical and operational leadership for security operations teams, driving ... Lead day-to-day cybersecurity operations supporting enterprise information systems. * Manage and ...

New

Neptune

Network and Security Operations Manager

Tallassee, AL · On-site

$71K - $96K/yr

Network & Security Operations Lead Position Summary We are seeking a highly skilled Network & Security Operations Lead to join our Enterprise IT Operations team as a technical leader. This is a key ...

previous page

Showing results 41-60

All JobsSecurity Operations Lead Jobs

Security Operations Lead information

See salary details

$12

$27

$64

How much do security operations lead jobs pay per hour?

As of Aug 7, 2026, the average hourly pay for security operations lead in the United States is $27.95, according to ZipRecruiter salary data. Most workers in this role earn between $18.27 and $31.01 per hour, depending on experience, location, and employer.

How does a Security Operations Lead typically collaborate with other departments to ensure organizational security?

A Security Operations Lead works closely with various departments such as IT, compliance, and risk management to develop and enforce security protocols. This role often involves coordinating incident response efforts, sharing threat intelligence, and conducting security awareness training across teams. Regular cross-functional meetings and clear communication channels are essential to address vulnerabilities and align security strategies with organizational goals. This collaborative approach helps ensure that security measures are integrated throughout the company’s operations.

What is a Security Operations Lead?

A Security Operations Lead is a professional responsible for overseeing the daily operations of an organization's security team. They manage security analysts, coordinate incident response, and ensure the effective monitoring and protection of digital assets against cyber threats. This role involves implementing security policies, handling escalations, and collaborating with other departments to maintain overall security posture. Security Operations Leads also play a key role in training staff and staying updated on the latest security technologies and threats.

What is the difference between Security Operations Lead vs Security Analyst?

AspectSecurity Operations LeadSecurity Analyst
CertificationsCompTIA Security+, CISSP, CISMCompTIA Security+, CEH, GIAC
Work EnvironmentOversees security teams, manages incident response, develops security strategiesMonitors security alerts, analyzes threats, implements security measures
Employer & Industry UsageUsed in organizations with security teams, corporate security departmentsCommon in security operations centers (SOCs), IT departments

The Security Operations Lead typically manages security teams and develops strategies, requiring leadership skills and certifications like CISSP. In contrast, a Security Analyst focuses on monitoring and analyzing security threats, often holding certifications like Security+ or CEH. Both roles are essential in cybersecurity but differ in responsibilities and scope.

What are the key skills and qualifications needed to thrive as a Security Operations Lead?

To thrive as a Security Operations Lead, you need a strong background in cybersecurity principles, incident response, and risk management, often supported by a relevant degree and certifications like CISSP or CISM. Familiarity with security information and event management (SIEM) tools, intrusion detection systems (IDS), and vulnerability assessment platforms is typically required. Leadership, analytical thinking, and effective communication are crucial soft skills for guiding teams and coordinating responses. These skills ensure proactive threat detection, efficient mitigation of security incidents, and robust organizational protection.
What cities are hiring for Security Operations Lead jobs? Cities with the most Security Operations Lead job openings:
What states have the most Security Operations Lead jobs? States with the most job openings for Security Operations Lead jobs include:
Security Operations Lead jobs near you
Infographic showing various Security Operations Lead job openings in the United States as of August 2026, with employment types broken down into 85% Full Time, 12% Part Time, 1% Temporary, and 2% Contract. Highlights an 94% Physical, 2% Hybrid, and 4% Remote job distribution, with an average salary of $58,139 per year, or $28 per hour.

Security Operations Center Lead

Florida Gulf Coast University

Fort Myers, FL • On-site

Full-time

Re-posted 14 days ago

Job description

Job Summary
The Security Operations Center Lead is responsible for leading the day-to-day operations of the University's Security Operations Center, including cybersecurity monitoring, alert triage, incident response coordination, operational reporting, and continuous improvement of SOC processes. This position serves as the primary operational lead for the SOC and provides technical supervision, mentorship, and professional development for undergraduate and graduate student analysts. The position ensures that security events are investigated, documented, escalated, and remediated in accordance with approved procedures, response playbooks, and institutional priorities. The lead collaborates closely with Information Technology Services, the Information Security Office, Help Desk, Client Services, and other university stakeholders and external partners to protect University systems, data, services, and users while supporting the broader mission of cybersecurity education, workforce development, and institutional risk reduction.
FGCU is building a culture of curiosity, commitment and collaboration. We value employees who successfully work with others and drive positive change through critical thinking and decisive action. If you thrive in an environment of innovation, accountability and mutual respect, you will find a good home here.
Job Description
Typical duties may include but are not limited to:
  • Leads day-to-day Security Operations Center (SOC) activities, including security monitoring, alert triage, investigation, escalation, incident response coordination, operational reporting, and analyst shift oversight.
  • Participates in after-hours incident response, emergency escalation, and on-call support as needed to address significant cybersecurity events or operational requirements.
  • Recruits, hires, trains, mentors, and supervises undergraduate and graduate student analysts. Provides ongoing coaching, performance feedback, and career development support.
  • Develops and maintains a structured student analyst training program covering alert triage, SIEM operations, threat detection, MITRE ATT&CK methodologies, digital forensics fundamentals, investigation procedures, and incident response workflows.
  • Develops or supports cybersecurity exercises, tabletop scenarios, and incident response drills to evaluate readiness and improve coordination among SOC personnel, ITS teams, and university stakeholders.
  • Establishes analyst progression standards, operational guardrails, and escalation thresholds to ensure student analysts operate within approved authority and documented procedures.
  • Performs security monitoring, investigation, and incident response activities as needed to maintain SOC operations during periods of reduced student staffing or elevated operational demand.
  • Reviews, validates, and directs security investigations, ensuring security events are properly analyzed, documented, escalated, and communicated in accordance with established policies, procedures, and response playbooks.
  • Serves as the operational lead during significant cybersecurity incidents, coordinating response activities with Information Technology Services (ITS), university leadership, legal counsel, human resources, communications personnel, and external partners as appropriate.
  • Maintains and improves detection, monitoring, and response capabilities across security technologies, including SIEM, endpoint detection and response (EDR), cloud security platforms, and related cybersecurity tools.
  • Develops, maintains, and updates SOC playbooks, standard operating procedures, workflows, and documentation to support consistent and effective security operations.
  • Manages relationships with managed security service providers (MSSPs), incident response vendors, and other external security partners to support monitoring, investigation, and response activities.
  • Supports security operations and incident response activities involving regulated or sensitive institutional data, including data subject to FERPA, GLBA, PCI DSS, HIPAA where applicable, and university policies.
  • Escalates actionable cybersecurity risks, incidents, and operational concerns to the Chief Information Security Officer (CISO) and other designated stakeholders.
  • Maintains security operations documentation and reports on security metrics, incident trends, operational performance, and student program outcomes.
  • Conducts or supports audits, compliance activities, and security reviews.
  • Conducts post-incident reviews and broader security process evaluations to identify lessons learned, document corrective actions, and recommend improvements to detection logic, response procedures, communication workflows, and operational controls to enhance overall SOC effectiveness and operational efficiency. Communicates technical security findings, risks, and operational impacts in clear, non-technical language suitable for university leadership and business stakeholders.
  • Contributes to broader information security initiatives including cloud security, identity and access management, security awareness, and emerging technology governance efforts.

Other Duties:
  • Performs other job-related duties as assigned.

Additional Job Description
Required Qualifications:
  • This position requires nine years of directly related full-time experience or, as an alternative, a Bachelor's degree from an accredited institution in Cybersecurity, Computer Science, Informatics, Information Systems, or related field and five years of full-time experience directly related to the job functions.
  • Experience with SOC operations, security monitoring, incident response, or related cybersecurity functions, including conducting cybersecurity investigations, alert triage, or security event analysis.
  • Experience with enterprise SIEM, EDR, or similar platforms.
  • Experience utilizing Microsoft security tools, including Microsoft Entra ID, Microsoft Sentinel, Active Directory, Microsoft Defender, Microsoft 365 security features or comparable enterprise security tools.
  • Any appropriate combination of relevant education, experience, and/or certifications may be considered.

Preferred Qualifications:
  • Five years full time experience in cybersecurity operations, incident response, or threat detection.
  • Two years experience in managing, coaching, or mentoring technical staff or junior analysts
  • Familiarity with NIST CSF, NIST 800-53, FERPA, and HIPPA.
  • Experience working in Higher Education.
  • Familiarity with Higher Education technologies, including Banner, Workday, Canvas, Blackboard, and research computing infrastructure.
  • Experience designing security training or formal curricula.
  • Experience with Microsoft Sentinel, Microsoft Defender XDR, Microsoft Entra ID, Microsoft Purview, or related Microsoft security technologies.Experience with SOAR platforms.
  • CISSP, CISM, Security+, GCIH, GCIA, CISA, or similar certifications.

Knowledge, Skills & Abilities:
  • Proven ability to think strategically and approach challenges with creativity.
  • Demonstrated track record of reliability, meeting goals, and holding oneself accountable.
  • Strong interpersonal skills and experience working effectively across teams.
  • Knowledge of security strategies (operating system hardening, vulnerability management, change management, application testing/patching, security tools, and software products).
  • Knowledge of network/system security access, management, and testing.
  • Knowledge of applicable security policies, best practices, and principles.
  • Knowledge of standard computer logging processes and understanding of the types of events logged.
  • Skill in identifying complex problems and reviewing related information to develop and evaluate options and implement solutions.
  • Excellent interpersonal skills.
  • Advanced verbal and written communication skills and the ability to present effectively to small and large groups.
  • Ability to take initiative to plan, organize, coordinate and perform work in various situations when numerous and competing demands are involved.
  • Ability to collaborate and work effectively within the community and willing to contribute to a team effort.
  • Ability to work independently and follow through on assignments.
  • Ability to translate security concepts to all areas of the business.
  • Ability to interpret log data and investigate potential issues.
  • Ability to prepare network/system diagrams and advise on secure implementations of systems and services.
  • Ability to discern between security breaches and more innocent technical bugs.
  • Ability to participate in after-hour incident response or emergency escalation activities as needed.

Institutional Values & Behavioral Expectation
In this role, the successful candidate will be expected to:
  • Seek out new approaches to improve outcomes; remain open for feedback and new ideas.
  • Lead with integrity; consistently produce high-quality work; persevere to overcome obstacles to meet deadlines and achieve deliverables.
  • Share information and insights thoughtfully; build partnerships across departments; communicate respectfully; support colleagues to achieve common goals.

Pay Grade 19
FGCU is a State University System of Florida member and an Equal Opportunity and Equal Access employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, disability, or protected veteran status.

Apply