Service Manager - Network Security

Role : Service Manager - Network Security


Location : San Diego, CA (Onsite - Hybrid)


Duration : 6 Monhts CTH

• This role carries full operational accountability for day-to-day management of a six-person team delivering firewall management, vulnerability management, compliance reporting, and network services including DNS, DHCP, and IP Address Management (IPAM).
• The Service Manager - Security serves as the primary interface with the client Cyber Security Manager and is responsible for ensuring service delivery meets or exceeds contractual SLR/SLA obligations, producing audit-ready compliance documentation, and driving continuous improvement across the security service tower.

• Lead, mentor, and manage a team of six security professionals across the Security Tower
• Own day-to-day operations and ensure SLR/SLA compliance across all security service lines
• Conduct regular team performance reviews, workload balancing, and development planning
• Escalate and manage P1/P2 security incidents in alignment with MSA contractual requirements

• Own the Palo Alto firewall environment across 24 devices managed via Panorama
• Oversee firewall rule optimization, policy lifecycle management, and rule template implementation
• Ensure firewall configurations align with CIS Benchmarks and organizational security standards
• Lead SOP development, maintenance, and stakeholder review for firewall operations

• Oversee monthly vulnerability scanning using Qualys; ensure CVSS-based prioritization and remediation tracking
• Maintain the centralized Patch Update Tracker and report compliance status against MSA obligations
• Coordinate remediation activities across engineering teams and report findings to City stakeholders

• Manage DNS, DHCP, and IPAM services delivered via Infoblox across the City's network environment
• Ensure availability, accuracy, and integrity of IP address space and DNS resolution infrastructure
• Oversee change management and documentation for all DNS/DHCP/IPAM modifications

• Own compliance deliverables aligned to NIST 800-53 Rev 5, CIS Controls, NIST CSF 2.0, and CJIS frameworks
• Author and maintain SOPs, risk assessments, and audit-ready documentation for the Security Tower
• Support quarterly performance reporting per MSA Schedule 15 obligations
• Ensure all compliance activities are traceable to specific framework controls and MSA schedule references

• Serve as the primary point of contact with the City of San Diego Cyber Security Manager
• Deliver executive-level status updates, briefings, and compliance summaries to City IT stakeholders
• Collaborate with the Service Delivery Manager to align security priorities with broader contract obligations
• Participate in governance reviews and represent the Security Tower in program-level forums

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field; equivalent experience considered
• 5+ years of experience in IT security operations, service management, or a related discipline
• 2+ years of experience managing or leading technical security teams
• Demonstrated experience producing compliance documentation aligned to NIST, CIS, or equivalent frameworks

• CISSP - Certified Information Systems Security Professional, OR
• CISM - Certified Information Security Manager, OR
• CISA - Certified Information Systems Auditor, AND
• PMP - Project Management Professional (required in addition to security certification)

• Strong working knowledge of NIST CSF 2.0, NIST 800-53 Rev 5, and CIS Controls
• Ability to author and maintain audit-ready SOPs, risk assessments, and compliance reports
• Experience managing SLR/SLA obligations in a managed services or enterprise IT environment
• Proficiency with ITSM platforms (ServiceNow preferred) for ticket management, CMDB, and reporting
• Excellent verbal and written communication skills; ability to present to both technical and executive audiences

• Hands-on experience with Palo Alto Networks firewalls and Panorama centralized management
• Familiarity with Qualys vulnerability management platform and CVSS-based remediation prioritization
• Experience with Infoblox DDI (DNS, DHCP, IPAM) administration and change management
• Knowledge of CJIS Security Policy requirements and government/municipal IT environments
• Prior experience supporting a public sector or government-contracted managed services engagement
• Familiarity with ITIL 4 service management practices