Security Operations Team Lead

POSITION SUMMARY


Under minimum direction, the Security Operations Team Lead is responsible for and manages the day-to-day activities of McCarthy's Security Operations team. This role provides technical guidance, coordinates alert and ticket response, and serves as the first escalation point for security operations issues. The Team Lead partners with Security Engineering, managed security providers, end users and other technology teams to maintain effective detection, response, and operational readiness. This position reports to the Security Manager.


RESPONSIBILITIES

• Lead and prioritize the daily work and projects of the Security Operations team.
• Serve as the first escalation point for security alerts, tickets, investigations, and operational issues.
• Coach, develop, and support Security Operations Engineers.
• Provide hands-on assistance with alert triage, investigations, incident response, threat hunting, and high-priority operational tasks.
• Oversee day-to-day coordination, relationship, and expectations with the managed detection and response (MDR) providers, including alert review, escalations, tuning, and service quality.
• Lead and/or participate in incident response activities (Detect, Respond, Recover).
• Help maintain and improve security operations playbooks, procedures, escalation paths, and documentation.
• Participate in sprint planning, backlog prioritization, and work tracking.
• Participate in the security operations on-call schedule.
• Support security assessments, audits, vulnerability remediation, policy development, and continuous improvement initiatives.
• Create and track relevant metrics for continuous improvement.
• Conduct third party security / vendor reviews.
• Contribute to improving the Cyber Safety culture at McCarthy, including phishing campaigns and security awareness training.

QUALIFICATIONS

• Bachelor's Degree in related field preferred.
• Minimum 3 years of experience in cybersecurity, security operations, or a related field.
• Minimum 3 years of people / project management preferred.
• Experience leading, mentoring, or coordinating technical personnel.
• Experience with security monitoring, endpoint protection, identity security, incident response, threat hunting, or related disciplines.
• Experience working with a managed security or managed detection and response provider preferred.
• Support experience in operations and high ticket / call volume.
• Hands on experience and in-depth knowledge of enterprise IT infrastructure, endpoints, identity, networks, applications, and cloud technologies.

Skills and Competencies

• Strong written and verbal communication skills.
• Ability to coach and develop security operations engineers.
• Strong problem-solving, analytical, organizational, and decision-making skills.
• Ability to remain calm and effective during high-priority events or incidents.
• Ability to collaborate with technical and non-technical stakeholders at all levels.
• Ability to work independently, meet deadlines, and maintain a strong internal client experience.
• Commitment to documentation, operational discipline, and continuous improvement.
• Develop and provide training to educate users regarding security best practices.

McCarthy is proud to be an equal opportunity employer, including disability and protected veteran status.

NOTICE TO EXTERNAL SEARCH FIRMS: McCarthy's Talent Acquisition Team is the only authorized representative permitted to engage with external search firms, staffing agencies, or other third-party recruiting partners. McCarthy maintains an Approved Agency List for recruiting partners, which is reviewed and updated annually.

McCarthy will only consider submissions from agencies with a signed fee agreement in place for the current year. McCarthy does not accept unsolicited resumes, candidate submissions, or referrals from agencies that do not meet these requirements.

If a candidate is submitted without an active agreement, McCarthy will have no obligation to pay any fees and reserves the right to contact, engage, interview, or hire such candidate(s) without any financial or other responsibility to the submitting agency. Unsolicited resumes, including those sent directly to hiring managers or other employees, will be considered the property of McCarthy.