Blue Team Manager
Core
Lead and manage defensive cybersecurity operations, monitoring, detecting, and responding to security incidents to improve organizational security posture.
Role type
Senior IC Blue Team Manager
Builds
Security operations processes, incident response playbooks, and detection capabilities
Domain
Cybersecurity / Defensive Operations
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Incident response, Threat hunting, Security automation, SIEM management, EDR management, Security architecture, Process improvement, Team leadership, Strategic decision-making
Preferred skills
Security tool configuration, Workflow solution management, Performance metrics analysis
Technologies
Rapid7/InsightIDR, QRadar, FortiSIEM, Microsoft Sentinel, EDR, SOAR, Firewalls, IDS/IPS, Remedy
Responsibilities
Lead team in monitoring, detection, and response to security incidents; Oversee operations in SIEMs and security tools; Define and review playbooks, policies, and performance metrics; Directly support critical investigations with technical analysis.
Seniority
Senior, hands-on IC
