Mgr IT Security I

About the role

In this role, you will manage a team of security analysts, overseeing their development and ensuring effective incident response operations. Your responsibilities will include leading investigations into security incidents and coordinating with various stakeholders, including external partners and executives.

Success in this position will require a strong technical background in cybersecurity, particularly with SIEM, EDR/XDR, and SOAR technologies. You will also need to foster collaboration across departments and maintain high standards for security operations while continuously improving detection and response capabilities.

The compensation for this role ranges from $120,000 to $180,000 USD, reflecting the expertise required.

Skills that matter here

• Cybersecurity: This role requires extensive experience in cybersecurity to lead and mentor a team effectively.
• SIEM: Knowledge of SIEM systems is critical for improving threat detection and response.
• EDR/XDR: Experience with EDR/XDR is necessary for managing incident response and threat hunting.
• SOAR: You will utilize SOAR to automate response workflows and enhance operational efficiency.
• MITRE ATT&CK: Applying MITRE ATT&CK frameworks is essential for assessing and improving detection capabilities.

Who this role suits

• A seasoned cybersecurity professional with at least seven years of experience.
• Someone who has previously led a Security Operations Center or incident response team.
• An individual with strong communication skills, capable of conveying technical findings to non-technical stakeholders.
• A proactive leader who can make informed decisions under pressure.

From the employer

What You’ll Do

• Lead and Develop the Team
• Manage, mentor and develop security analysts, with responsibility for hiring, coaching, performance management and career development.
• Set priorities for daily operations and establish clear standards for investigation quality, response times and escalation.
• Lead Incident Response
• Lead or support incidents from detection through containment, eradication, recovery and lessons learned, following established incident response frameworks and procedures.
• Serve as a primary coordination point during major incidents, communicating business impact, response progress and key decisions to executives, Legal and Compliance.
• Coordinate response activities with IT, business teams and external partners, including forensic specialists, law enforcement and customer security teams when appropriate.
• Drive root cause analysis, track corrective actions through completion, and maintain and exercise incident response plans, playbooks, runbooks and escalation procedures.
• Advance Detection, Automation and Threat Hunting
• Partner with security engineering to improve SIEM, EDR/XDR and email security detections using findings from investigations, threat intelligence and analyst feedback.
• Identify opportunities to automate repetitive work and develop SOAR workflows that improve response speed, consistency and analyst capacity.
• Use MITRE ATT&CK to assess detection coverage, prioritize gaps and validate improvements.
• Translate threat intelligence and emerging attacker techniques into targeted hunts, detection requirements and response actions.
• Evolve response capabilities for AI-enabled threats, including deepfake impersonation, AI-generated phishing and automated attacks.
• Help validate defenses through purple team exercises and adversary simulations.
• Manage the operational relationship with the managed SOC partner, including service performance, SLAs, escalation quality and handoffs.
• Support Data Protection
• Support the data loss prevention program through policy tuning, alert review and investigations into potential data exposure.
• Work with business owners to implement practical data protection measures that support everyday work.
• Build Trust Across the Business
• Provide clear, responsive support to employees reporting suspicious activity or affected by security incidents.
• Translate technical findings into understandable risks, business impacts and recommended actions.
• Strengthen security awareness using lessons from real incidents and emerging threats.
• Measure and Improve Performance
• Track and report measures such as time to detect and contain threats, investigation quality, alert trends and automation effectiveness.
• Use operational data to prioritize improvements, inform staffing and investment decisions, and demonstrate the value of security operations.
• Support security operations requirements for PCI DSS and SOC 2, including maintaining procedures and providing audit evidence.

What You Bring

• Education and experience:
• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems or a related field, or equivalent practical experience.
• Seven or more years of cybersecurity experience, including at least three years leading a SOC or incident response analyst team.
• People leadership:
• Demonstrated ability to develop analysts, set operational priorities and maintain effective security operations.
• Incident response expertise:
• Hands-on experience investigating and responding to account compromise, phishing, ransomware and malware incidents.
• Technical knowledge:
• Strong knowledge of SIEM, EDR/XDR, SOAR and email security platforms, with practical experience applying MITRE ATT&CK to detection, investigation and response.
• Communication and judgment:
• Clear communication skills and the ability to support an affected employee, coordinate technical responders and brief executives.
• Sound judgment under pressure, including the ability to make timely decisions with incomplete information.

What the Company Offers

• Estimated starting compensation range for this role is $120,000–$180,000 USD.
• Base pay is one component of IGT’s total rewards program.
• Employees may be eligible for bonus or commission opportunities.
• Comprehensive benefits package, which may include:
• 401(k) savings plan with company contributions
• Medical, dental, and vision insurance
• Life and disability coverage
• Paid time off
• Tuition reimbursement
• Other wellness programs, subject to eligibility requirements.