Responsibilities
- Oversee the daily operations and strategic direction of the 24/7/365 Cybersecurity Operations Center (CSOC).
- Direct incident response for high-priority cybersecurity events and manage post-incident reviews and ongoing improvements.
- Expand proactive threat hunting using threat intelligence, behavioral analytics, and AI-assisted investigations.
- Collaborate with IT infrastructure, cloud, engineering, risk, and business leaders to define and deliver the future state of cybersecurity operations, enabling rapid detection, investigation, and response while maximizing productivity and reducing complexity.
- Work with third-party security providers and managed security service providers (MSSPs) to enhance service delivery and operational effectiveness.
- Support major business events and critical operations by ensuring continuous monitoring and rapid incident response capabilities.
- Develop and execute a strategic roadmap for a modern Cybersecurity Operations Center built on automation, orchestration, AI, and agentic AI.
- Define the future operating model for security operations, balancing human expertise with autonomous security capabilities.
- Champion continuous modernization initiatives that improve resilience, scalability, and analyst effectiveness.
- Develop and execute the roadmap for a modern, AI-enabled SOC focused on automation, orchestration, and continuous operational improvement.
- Create playbooks and orchestrated workflows using SOAR technologies to improve consistency, speed, and scalability.
- Use agentic AI and machine learning to automate repetitive analyst tasks, improve triage accuracy, alert enrichment, response actions, accelerate investigations, and enable autonomous response where appropriate.
- Identify opportunities to eliminate operational inefficiencies through intelligent automation and workflow optimization.
- Sponsor the development of automation playbooks and integrations across the cybersecurity technology stack.
- Lead, mentor, and develop a high-performing cybersecurity operations team while fostering innovation and continuous learning.
- Lead Security Operations, Detection Engineering, Incident Response, Threat Hunting, and Security Automation teams.
- Establish KPIs that measure operational maturity, automation effectiveness, analyst productivity, detection quality, and response performance.
- Drive continuous improvement in Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), alert fidelity, and analyst capacity through technology optimization.
- Drive integration and optimization of SIEM, SOAR, XDR, EDR, Threat Intelligence, Vulnerability Management, Identity Security, Cloud Security, Email Security, and Network Security.
- Build detection engineering capabilities that continuously improve visibility across the enterprise, including cloud, endpoints, network, email, and SaaS environments.
- Evaluate emerging cybersecurity technologies and recommend investments that improve operational capability and efficiency.
- Present cybersecurity operational maturity, modernization progress, and risk metrics to executive leadership through dashboards and operational reporting, communicating cyber risk, operational performance, and program maturity.
- Partner with cybersecurity architecture, security engineering, and IT teams to operationalize new security technologies and maximize value through integration and automation.
- Work with Information Security Office leadership and other stakeholders to develop multi-year investment strategies for cybersecurity operations technologies and workforce transformation.
- Partner with business leaders to align cybersecurity operations with organizational objectives and enterprise resilience.
Compensation
This job posting contains a pay range, which represents the range of salaries or hourly rates that the NFL believes, in good faith, at the time of this posting that it might be willing to pay for the posted job in the location(s) specified. The NFL expects to hire for this position near the middle of the range. Only in truly rare and exceptional circumstances, where an external candidate has experience, credentials or expertise that far exceed those required or expected for the position, would the NFL consider paying a salary or rate near the higher end of the range.
Other
- Travel domestically and internationally is required for this position. While frequency and duration of travel will vary throughout the year, applicants should anticipate approximately 15%-20% travel.
- This job posting contains a pay range, which represents the range of salaries or hourly rates that the NFL believes, in good faith, at the time of this posting that it might be willing to pay for the posted job in the location(s) specified. The NFL expects to hire for this position near the middle of the range. Only in truly rare and exceptional circumstances, where an external candidate has experience, credentials or expertise that far exceed those required or expected for the position, would the NFL consider paying a salary or rate near the higher end of the range.
