{"id":2635856,"url":"https://alion.io/job/crosscountry-consulting-manager-cyber-security-2","title":"Manager-Cyber Security","company":{"id":59653,"name":"CrossCountry Consulting","domain":"crosscountry-consulting.com","url":"https://alion.io/company/crosscountry-consulting","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":82,"open_postings":93,"ghost_share":0.215,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":103,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Los Angeles, United States","Dallas, United States","New York, United States","Seattle, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":149000,"max_usd":286000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BeyondTrust","optional":false},{"name":"Bicep","optional":false},{"name":"BloodHound","optional":false},{"name":"Checkmarx","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Cortex","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"Crowdstrike","optional":false},{"name":"CVSS","optional":false},{"name":"CyberArk","optional":false},{"name":"Datadog","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NIST CSF","optional":false},{"name":"Okta","optional":false},{"name":"Open Policy Agent","optional":false},{"name":"Pacu","optional":false},{"name":"PCI DSS","optional":false},{"name":"Prisma Cloud","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Recorded Future","optional":false},{"name":"Red Teaming","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false},{"name":"VPN","optional":false},{"name":"Wiz","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-10-15T16:30:49Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-29T04:59:08Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":13},"description":"From the beginning, our goal was to establish an advisory firm that stands apart from the rest - one that is grounded in our Core Values and dedicated to creating a positive experience not just for our clients, but for our people too. We firmly believe in the strength of collaboration, enthusiasm, generosity, and perseverance as the driving forces behind our success. With advisory solutions spanning accounting and risk, technology-enabled transformation, and transactions, we partner with our clients to solve today’s challenges and deliver present and future value.\nOur commitment to our people has earned us numerous awards including Inc5000's Fastest Growing Companies and Glassdoor's Best Places to Work. Explore what our employees have to say about our unique culture by clicking here.\nWe are seeking a technically strong Cybersecurity Manager to join our high-performing Cybersecurity & Privacy practice. This is a hands-on role requiring deep expertise across cloud security architecture, security engineering, risk and compliance frameworks, and threat modeling. The ideal candidate brings a strong technical foundation and the ability to design, implement, and assess security solutions across complex client environments. The position is hybrid (60% on-site/client, 40% remote) with local travel\nWhat You'll Do\nTypical Engagements Include:\nAssess and mature IAM programs, including identity governance, privileged access, SSO/MFA, joiner-mover-leaver, access reviews, and least privilege across on-prem and cloud (Okta, Microsoft Entra ID, SailPoint, CyberArk, BeyondTrust)\nDesign cloud security architectures for AWS, Azure, and GCP, including identity federation, segmentation, encryption, and logging (AWS IAM/KMS, Azure Policy, GCP IAM, HashiCorp Vault)\nImplement controls for containers, infrastructure-as-code, and serverless, with focus on workload identity, secrets management, and policy-as-code (Kubernetes, Terraform, CloudFormation, Open Policy Agent, Checkov)\nDesign API security standards and secure integration patterns, including OAuth 2.0/OIDC, service-to-service authentication, and gateway controls (Apigee, Azure API Management, AWS API Gateway)\nConduct risk and maturity assessments using ISO 27001, NIST CSF 2.0, CIS 18, PCI-DSS, NIST 800-53, CSA CCM, and MITRE ATT&CK, emphasizing identity and cloud controls\nPerform security tool gap analysis, consolidation, and implementation across vulnerability management, endpoint, SIEM, IDS/IPS, firewall, and cloud platforms (Tenable, Qualys, CrowdStrike, Splunk, Microsoft Sentinel, Palo Alto Networks, Wiz, Prisma Cloud)\nLead security transformation programs covering architecture, implementation, and remediation, with a zero trust, identity-centric approach (Zscaler, Netskope)\nPerform threat modeling and penetration testing advisory, including identity-based attack paths and cloud misconfigurations (BloodHound, Pacu, Burp Suite)\nApply MITRE ATT&CK to map adversary techniques and inform controls and detection coverage (ATT&CK Navigator, Atomic Red Team)\nDrive capability uplift across IAM, Vulnerability Management, Incident Response, IT DR, Business Continuity, Threat Intelligence, and Security Monitoring (ServiceNow, Recorded Future, Mandiant)\nAssess IR readiness; design playbooks for identity compromise and cloud incidents and facilitate technical tabletop exercises (Cortex XSOAR, Splunk SOAR, Microsoft Defender XDR)\nReview and harden application and system DR plans, identifying gaps and developing remediation playbooks (AWS Elastic Disaster Recovery, Azure Site Recovery, Veeam, Zerto)\nEngineer controls for code scanning (SAST/DAST) and application and infrastructure monitoring, including IAM policy analysis and identity threat detection (Snyk, Checkmarx, SonarQube, Datadog, Entra ID Protection)\nImplement and advise on PCI-DSS compliance and support CCPA/CPRA and GDPR privacy audits (OneTrust, Drata, Vanta)\nLeadership Skills\nServe as a proactive project leader and self-starter, driving engagement timelines, deliverables, and client confidence forward without needing direction\nManage multiple concurrent workstreams across assessment, implementation, and compliance activities - keeping teams organized, prioritized, and on schedule across all threads\nAnticipate risks, dependencies, and roadblocks before they escalate, bringing well-reasoned solutions to clients and internal stakeholders proactively\nLead and coordinate cross-functional project teams across Senior Associates and other practice members, delegating effectively to maintain quality, accountability, and momentum throughout the engagement lifecycle\nOwn the full arc of engagement success - from initial scoping and project planning through final delivery - taking personal accountability for client satisfaction, output quality, and measurable outcomes\nWhat You'll Bring\nEducation and Experience\nBachelor's degree required in Information Systems, Computer Science, Mathematics, or a related technical field\nMinimum of 5 years of Big 4 or related consulting/professional services experience with hands-on Cybersecurity engineering and advisory expertise\nCertifications\nCISSP - Certified Information Systems Security Professional\nCCSP - Certified Cloud Security Professional\nAWS Certified Security Specialty, Microsoft SC-100/AZ-500, or equivalent cloud security certification\nCISM, CEH, OSCP, or other relevant security certifications a plus\nTechnical Skills\nCloud platforms: hands-on experience with AWS, Azure, and/or GCP security services and native security tooling\nCloud-native security: containers (Docker, Kubernetes), IaC (Terraform, CloudFormation, Bicep), serverless security, and CI/CD pipeline security\nNetwork security: Firewalls (Palo Alto, Fortinet, Cisco), VPN, IDS/IPS, micro segmentation, and zero-trust architecture\nEndpoint & identity security: EDR/XDR platforms, PAM, IAM, MFA, and SSO solutions\nVulnerability management: Tenable, Qualys, Rapid7, or equivalent; familiarity with CVSS scoring and patch prioritization\nApplication security: SAST/DAST tooling, API security testing, secure SDLC practices, and code scanning platforms\n#LI- Hybrid","description_format":"text","description_chars":6138,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Application Security","Financial Advisory, Valuation & Restructuring","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-15T17:19:16Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 29 · green card filings: 1","filings_12m":29,"filings_prev_12m":24,"green_card_filings_12m":1,"median_offered_wage_usd":118333,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":13,"expected_fill_days":103,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/crosscountry-consulting-manager-cyber-security-2","json_url":"https://alion.io/job/crosscountry-consulting-manager-cyber-security-2.json","meta":{"generated_at":"2026-10-29T06:53:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10432,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":59653},"rest":"https://alion.io/mcp/rest/get_company?id=59653"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcrosscountry-consulting-manager-cyber-security-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcrosscountry-consulting-manager-cyber-security-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcrosscountry-consulting-manager-cyber-security-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/crosscountry-consulting-manager-cyber-security-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcrosscountry-consulting-manager-cyber-security-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2635856}},{"tool":"search_jobs","arguments":{"company":"crosscountry-consulting.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2635856},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}