Cybersecurity Operations Manager / Technical Account Manager (TAM)
Location: San Diego, California
Duration: 12 months
Position Summary
We are seeking an experienced Cybersecurity Operations Manager / Technical Account Manager (TAM) to serve as the onsite liaison among client partners. This 12-month role will lead operational oversight of CrowdStrike services, including implementation, adoption, governance, and daily coordination.
The resource will coordinate implementation through steady-state support, serving as the central contact for Falcon Complete, CTEM, Falcon Guardian / AIDR, service reviews, and escalations.
Primary Objectives During the First Year
Lead the successful implementation and onboarding of CrowdStrike services.
Establish governance, operational reviews, escalation paths, and service-management processes.
Manage CTEM operations and remediation coordination.
Manage Falcon Guardian / AIDR administration and operating processes.
Assist ICW in maturing security operations and incident-response processes.
Complete knowledge transfer and operational-readiness documentation before the end of the assignment.
Key Responsibilities
CrowdStrike Service Management
Act as the primary operational liaison for Falcon Complete service matters.
Coordinate critical-incident communications, follow-up actions, and closure.
Ensure recommendations are assigned, tracked, and resolved by the appropriate team.
Security Operations and GSI Coordination
Coordinate implementation workstreams, dependencies, risks, and delivery with the client as the GSI.
Maintain accountability through documented owners, due dates, actions, and escalations.
Coordinate response and remediation across infrastructure, endpoint, identity, cloud, and application teams.
CTEM and Falcon Guardian / AIDR
Lead day-to-day administration and operating processes for CTEM and Falcon Guardian / AIDR.
Coordinate exposure prioritization, remediation, tuning, reporting, and continuous improvement.
Integrate findings into ICW workflows and partner with asset owners to reduce risk.
Governance, Reporting, and Transition
Lead weekly operational and monthly service reviews.
Maintain a RAID log covering risks, assumptions, issues, and dependencies.
Create executive dashboards and concise status reporting.
Maintain the roadmap, RACI, escalation model, and transition plan.
Deliverables During the Engagement
Implementation oversight, deployment coordination, and operational transition plan.
Security-operations governance framework, cadence, RACI, and escalation model.
Executive dashboards, monthly service reviews, and action tracking.
Incident-escalation and stakeholder-communication process.
CTEM remediation tracking and Falcon Guardian / AIDR operating procedures.
RAID log and remediation-status reporting.
Knowledge-transfer and operational-readiness documentation.
Required Experience and Qualifications
10+ years of cybersecurity experience spanning security operations, incident response, threat detection, exposure management, or managed security services.
5+ years leading enterprise SOC, MDR, incident-response, or managed-security programs.
3+ years of operational experience with CrowdStrike Falcon technologies, preferably Falcon Complete, Insight, Identity Protection, Exposure Management, Next-Gen SIEM, or Guardian / AIDR.
Experience in a senior client-facing role such as TAM, Security Operations Manager, SOC Manager, Service Delivery Manager, or Cybersecurity Program Manager.
Proven coordination across customers, cybersecurity vendors, and global systems integrators during implementation and operations.
Experience with critical escalations, governance, executive reporting, service reviews, and cross-functional remediation.
Strong communication skills and the ability to translate technical issues into business impact and clear actions.
Preferred Technical Experience
CrowdStrike Falcon Complete, Falcon Insight EDR, Falcon Identity Protection, Falcon Exposure Management, Falcon Guardian / AIDR, Falcon Next-Gen SIEM, and Falcon OverWatch.
Security incident response, threat hunting, detection engineering, vulnerability and exposure management, and SOC operations.
ServiceNow and Jira workflows; Microsoft Intune, SCCM, BigFix, or comparable endpoint-deployment tools.
Identity platforms such as Microsoft Entra ID, Active Directory, and Okta.
Cloud environments including Microsoft Azure, Amazon Web Services, or Google Cloud.
Working knowledge of NIST Cybersecurity Framework, MITRE ATT&CK, CIS Controls, ISO/IEC 27001, and ITIL practices.
Cybersecurity and Leadership
CISSP - Certified Information Systems Security Professional.
CISM - Certified Information Security Manager.
CCSP - Certified Cloud Security Professional.
GIAC Certified Incident Handler (GCIH), GIAC Certified Enterprise Defender (GCED), or comparable GIAC certification.
CompTIA Security+ for candidates whose broader experience demonstrates senior-level capability.
CrowdStrike
CrowdStrike Certified Falcon Administrator (CCFA).
CrowdStrike Certified Falcon Responder (CCFR).
CrowdStrike Certified Falcon Hunter (CCFH).
Other current CrowdStrike credentials relevant to Falcon Complete, identity, exposure management, or Next-Gen SIEM.
Program and Service Management
PMP - Project Management Professional.
ITIL 4 Foundation or advanced ITIL certification.
Microsoft Certified: Security Operations Analyst Associate or Cybersecurity Architect Expert.