{"id":2985067,"url":"https://alion.io/job/castelion-senior-manager-cybersecurity-operations","title":"Senior Manager – Cybersecurity Operations","company":{"id":1795053,"name":"Castelion","domain":"castelion.com","url":"https://alion.io/company/castelion","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":113000,"max_usd":218000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Carbon Black","optional":false},{"name":"CMMC","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Defense in Depth","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"NIST 800-171","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-09-07T17:28:22Z","employer_posted_date":"2026-09-23","last_verified_at":"2026-10-23T23:36:33Z","board_verified":true,"closed_at":null,"days_open":46,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":46},"description":"Why Castelion, Why Now \nCastelion is moving incredibly fast to develop and deliver advanced defense systems at a time when execution matters more than ever. We believe focus, ownership, and excellence are decisive advantages - and we're building a world-class team to turn bold ideas into real capability. \nThis is a rare opportunity to join at an early stage, where you'll have significant ownership, collaborate with exceptional teammates, and make a direct, measurable impact on our mission and the future of the company - regardless of your function. \nSenior Manager - Cybersecurity Operations\nWe are seeking an experienced Senior Manager - Cybersecurity Operations to join our cybersecurity operations team at Castelion. This critical role will lead defensive security operations, incident response, and threat monitoring, protecting our information systems, intellectual property, product development security, and critical infrastructure from common threat vectors as well as advanced persistent threats (APTs) and nation-state actors.\nThe ideal candidate will envision security to remain a business enabler and not a blocker, have deep expertise in defensive security operations, SOC leadership, proactive threat hunting, SIEM & SOAR, and incident response within highly regulated environments. Brings a practical, and up-to-date relevant technical understanding of protocols, encryption levels, patch levels, policy & procedure, etc., that are secure in the modern cybersecurity landscape.\nResponsibilities:\nContribute to and mature our Security Operations Center (SOC) activities and ensure effective threat detection and response\nDirect threat hunting operations to proactively identify and neutralize threats before impact\nLead incident response efforts for security events affecting all our information systems\nDevelop and maintain defensive playbooks, runbooks, and standard operating procedures\nCoordinate with additional internal teams to conduct exercises that validate defensive posture\nDesign and implement defense-in-depth strategies aligned with NIST, DoD, and intelligence community frameworks\nEvaluate and deploy advanced security technologies (SIEM, EDR/XDR, SOAR, threat intelligence platforms)\nCreate and maintain security architecture documentation and network defense diagrams\nContribute to security roadmap planning\nEstablish and maintain threat intelligence program aligned to aerospace and defense sector threats\nAnalyze threat actor tactics, techniques, and procedures (TTPs) using MITRE ATT&CK framework\nProduce threat intelligence reports and briefings for technical and executive audiences\nCollaborate with government agencies and industry partners on threat information sharing\nTrack emerging threats and vulnerabilities relevant to defense systems and aerospace technology\nContribute to compliance with NIST 800-171, CMMC, ITAR, DFARS, and other applicable regulations\nSupport security audits, assessments, accreditation activities, and regular penetration testing\nPartner with IT operations, engineering, and program management teams on security initiatives\nCoordinate with government customers and oversight bodies on security matters\nFunction as a primary stakeholder and subject matter expert for changes to cyber controls and policies\nRequired Qualifications:\n7+ years of hands-on experience in cybersecurity, with a focus in defensive operations\n2+ years in a leadership or team lead capacity\nProven experience operating in defense, aerospace, engineering, intelligence, government, or critical infrastructure sectors\nExperience in regulated environments (DoD, CMMC, NIST 800-171, ISO 27001, etc.)\nDemonstrated expertise in security monitoring, threat hunting, and incident response\nDemonstrated understanding of advanced persistent threat (APT) tactics and techniques\nHands-on experience with enterprise security tools (SIEM, EDR, IDS/IPS, firewalls, proxies)\nExpert knowledge of network protocols, security architecture, and system hardening\nExpert proficiency as both a configurator and a consumer of security information and event management (SIEM) platforms\nStrong understanding of Windows and Linux security and forensics\nExperience with endpoint detection and response (EDR) solutions (CrowdStrike, Carbon Black, Defender, SentinelOne, etc.)\nProficiency with scripting and automation (Python, PowerShell, Bash)\nKnowledge of cloud security (AWS, Azure, GovCloud)\nUnderstanding of malware analysis, reverse engineering techniques, and penetration testing\nExperience with threat intelligence platforms and indicator management\nDeep understanding of security principles, threats, and frameworks (e.g., cyber kill chain, MITRE ATT&CK, NIST, CIS Controls).\nStrong documentation, troubleshooting, and communication skills.\nAbility to thrive in fast-paced, high-pressure environments with competing priorities.\nAnalytical mindset with strong problem-solving abilities\nCommitment to staying current with evolving threat landscape\nPreferred Qualifications:\nActive Security+, CISSP, GIAC, GSOC, GCIA, GCIH, GCFA, CISA, CEH, or similar senior-level certifications\nEligibility to keep and maintain a U.S. security clearance.\nWhat We're Looking For:\nA proactive security professional who sees audits and compliance as opportunities to build better systems - not just check boxes.\nA disciplined thinker who can balance security, business needs, and regulatory constraints.\nA calm, solutions-oriented team member who leads by example during assessments, incidents, or high-pressure reviews.\nA clear communicator who knows how to educate non-technical stakeholders without watering things down.\nCastelion offers a generous benefits package. Please refer to the bottom of our Careers page for more details. \nOther Duties \nPlease note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. \nAdditional Eligibility Requirements \nThis position may require access to classified information or restricted U.S. Government sites, systems, or information, as determined by the Company and/or applicable U.S. Government requirements. If the position is so designated, your employment in the role may be contingent upon your ability to obtain and maintain the required U.S. Government security clearance or other government authorization, and to satisfy any citizenship or other eligibility requirements imposed by applicable law, regulation, executive order, or government contract requirements. You will be notified if and when such requirements apply. \nAffirmative Action/EEO Statement \nCastelion is an Equal Opportunity Employer. We are committed to providing equal employment opportunities to all applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. \nCastelion is committed to providing reasonable accommodations to qualified individuals with disabilities throughout the application and hiring process. If you require a reasonable accommodation to complete an application, participate in the interview process, or otherwise participate in the hiring process, please contact . Requests for accommodation will be considered on an individual basis and handled in accordance with applicable law. \nCastelion is committed to fostering a workplace where employment decisions are based on qualifications, business needs, and the ability to perform the essential functions of the role, with or without reasonable accommodation. \nEAR/ITAR Requirements \nThis position requires access to export-controlled information, and as such, employment (or hiring of a contractor) is contingent upon the candidate’s ability to access all applicable export-controlled information without additional export licensing being required by the Bureau of Industry and Security and/or the Directorate of Defense Trade Controls.","description_format":"text","description_chars":8160,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Missiles","Defense Manufacturing"],"lifecycle":[{"event":"open","at":"2026-10-21T08:14:48Z"}],"visa":[],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.727,"p_room":0.36,"age_days":45,"expected_fill_days":29,"reasons":["conf:0","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/castelion-senior-manager-cybersecurity-operations","json_url":"https://alion.io/job/castelion-senior-manager-cybersecurity-operations.json","meta":{"generated_at":"2026-10-23T23:53:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7586,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1795053},"rest":"https://alion.io/mcp/rest/get_company?id=1795053"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcastelion-senior-manager-cybersecurity-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcastelion-senior-manager-cybersecurity-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcastelion-senior-manager-cybersecurity-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/castelion-senior-manager-cybersecurity-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcastelion-senior-manager-cybersecurity-operations"}]}