Apply on Employer Site

BLACKCLOAK · 2 months ago

Head of Cyber Operations - Client Solutions

United States

Full-time

Remote

Director/Executive

$190K/yr - $225K/yr

8+ years exp

BlackCloak is dedicated to protecting corporate executives and high-profile individuals by defending their digital lives from various threats. The Head of Cyber Operations - Client Solutions will serve as a subject matter expert and operational leader, driving technical capabilities, managing incident responses, and ensuring seamless transitions for clients' cybersecurity needs.

Cyber SecurityInformation TechnologyPrivacy

Responsibilities

Serve as the technical expert for EDR/MDR/XDR platforms (e.g., CrowdStrike, SentinelOne, Defender, CarbonBlack). Responsibilities include setup, continuous operation, complex query response, and strategic vendor evaluation

Demonstrate strong knowledge of consumer and enterprise-grade networking equipment (e.g., Palo Alto, Meraki, Araknis, Fortinet, Eero, Orbi, Google, Aruba) to diagnose and secure home networks

Deep knowledge of networking tools (VPN, Network Sniffers), consumer AV (Trend, BitDefender, Norton, McAfee), 2FA variants, and password management (1Password) to assist in the diagnosis and triaging of complex incidents but also to develop and delivery client solutions

Maintain deep expert knowledge of Google Workspace and Microsoft 365 (O365), and understand Mobile Device Management (MDM) and Remote Monitoring and Management (RMM) solutions (e.g., JAMF, Kaseya) for growing and scaling the service

Act as a technical SME for the Product team, ensuring the BlackCloak product is architected and positioned to never interfere with a client's complex, existing systems

Own the planning and execution of complex, large-scale migrations (e.g., swapping all client EDR platforms in under 30 days), ensuring pre-emptive strategic deployment to facilitate seamless transitions

Serve as a peer-level expert on Incident Response, working alongside senior staff on complex investigations involving account takeover (email, finance, social media), network breaches, and sophisticated malware/virus analysis

Lead the triage process for all incoming cyber, computer, network, and device incidents, establishing the initial root cause, containment strategy, and path to resolution

Possess practical experience and deep knowledge of penetration testing methodologies and vulnerability management across diverse client environments

Provide expert-level support and solution design for patching, backups, and encryption across all major operating systems: Windows, macOS, iOS, and Android

Understand the complex interactions of all deployed client tools (both commercial and proprietary) to anticipate and resolve conflicts or interferences

Proactively monitor and assess global cybersecurity, IT, and high-tech news, providing actionable intelligence on how emerging threats and technology impact the BlackCloak service model

Maintain a strong understanding of financial crime, identity theft, scams, and fraud targeting executives, classifying these threats as potential "Company Killers" for clients

Utilize basic forensic techniques to secure evidence and conduct initial analysis post-incident

Qualification

Incident ResponseEndpoint SecurityCybersecurity ToolsLarge-scale MigrationsNetworking EquipmentVulnerability ManagementPenetration TestingGoogle WorkspaceMicrosoft 365Ethical JudgmentCommunication SkillsProject Management

Required

Minimum 8+ years of progressive experience in cybersecurity, IT, or Security Operations Center (SOC) roles

7+ years of experience in a lead role for complex, hands-on Incident Response (IR) or endpoint security engineering

Track record of operationalizing and scaling security services for external customers, ensuring high customer retention rates while driving efficiency and maturity within a client-facing Cyber Operations function

Expert-level certifications (e.g., GIAC, CISSP) are highly preferred

High level of integrity, discretion, and ethical judgment required for handling highly sensitive executive and privacy/security matters

Proven ability to manage technical projects end-to-end, especially large-scale migrations or platform deployments

Exceptional written and verbal communication skills, capable of explaining complex technical issues clearly to both technicians and executive leadership

Willingness to travel for client and company-related events

Preferred

Expert-level certifications (e.g., GIAC, CISSP) are highly preferred

Benefits

Comprehensive Medical, Dental, and Vision plans with a 100% employer-paid monthly premium option for employees & 50% employer-paid monthly premiums for dependents

Health Savings Account with company contribution for eligible medical plans

Flexible Vacation Plan

10 Paid Company Holidays

100% employer-paid Life, AD&D and Short- and Long-Term Disability Insurance

401k with Traditional and Roth options, including employer match

Company Equity

Paid Parental and Pregnancy Recovery Leave

Company and team off-sites and virtual events throughout the year

Home office stipend