ARCO a Family of Construction Companies · 3 days ago
Services Manager, Cybersecurity Operations
ARCO, a Family of Construction Companies, is seeking a Services Manager for Cybersecurity Operations to lead their security monitoring and incident response activities. This role involves managing a team of Cybersecurity Analysts, overseeing security tools, and collaborating with various departments to ensure a robust security posture.
ArchitectureCivil EngineeringConstructionInterior Design
Responsibilities
Lead, mentor, and develop a team of Cybersecurity Analysts responsible for monitoring, triage, and incident response
Oversee daily SOC operations and ensure timely, effective handling of security alerts and requests
Automate repetitive tasks and implement process improvements to enhance efficiency
Maintain and update runbooks, SOPs, escalation workflows, and operational playbooks
Lead all security incident investigations, containment, and remediation activities
Conduct regular incident response exercises and postmortems, identifying root causes and tracking improvements
Stay current on emerging threats and assess ARCO’s readiness to defend against them
Manage and optimize security tooling (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, threat intel platforms, etc.)
Oversee vulnerability scanning, prioritization, and remediation with Infrastructure partners
Support patching, hardening, and secure configuration efforts across systems and networks
Guide engineering, deployment, and documentation of security tools
Support audits, evidence requests, and compliance requirements (NIST 800-171, CMMC, NIST CSF) in partnership with GRC
Develop metrics and dashboards that measure organizational risk and SOC performance
Communicate security risks and incident updates to leadership in clear business terms
Ensure required security awareness training and phishing simulations are delivered effectively
Participate in change management, project reviews, and technology planning discussions
Collaborate with Technology teams to identify security gaps and strengthen overall posture
Qualification
Required
7-10 years of cybersecurity operations/engineering experience, including monitoring and incident response
Experience leading people, developing talent, and managing high-performing teams
Hands-on experience with core security technologies (SIEM, IDS/IPS, EDR, SIG, EPM, firewalls, vulnerability management, threat intel, SOAR)
Strong communication skills with the ability to translate technical issues into business risk
Proven ability to drive measurable improvements in SOC performance
Strong organizational skills with the ability to prioritize and delegate
Experience with Azure or AWS environments
Familiarity with industry frameworks (NIST 800-171, CMMC, NIST CSF)
Preferred
Preferred certifications: CISSP, CISM, SANS/GIAC, CySA+, or similar
Benefits
Industry-leading performance-based bonus program
100% company funded retirement contributions
Traditional and Roth 401k
Tuition reimbursement for associates
Scholarship for associates’ children up to $28,000 per child
1-month paid sabbatical after every five years of employment, plus $5,000 for travel
1-week paid volunteer leave each year
100% charitable match
Medical, dental, and vision insurance coverage
100% paid 12-week maternity leave
Company
ARCO a Family of Construction Companies
ARCO's goal is the same today as it was when we founded the company 30 years ago – to be the best design-build contractor in the industry and to serve our clients with expert skill and high integrity.