{"id":2585431,"url":"https://alion.io/job/george-bernard-cyber-operations-team-lead","title":"Cyber Operations Team Lead","company":{"id":4423584,"name":"George Bernard Consulting","domain":"georgebernard.co","url":"https://alion.io/company/georgebernard","size_band":null,"is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Manatal","truth_index":null},"role":"Leadership","role_family":"Leadership","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Colombo, Sri Lanka"],"countries":["LK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14000,"max_usd":41000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2175},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Censys","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"DNS","optional":false},{"name":"Nuclei","optional":false},{"name":"Shodan","optional":false},{"name":"TCP/IP","optional":false}],"status":"live","first_seen_at":"2026-10-15T03:42:37Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-24T23:20:45Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"Team Leadership and Management\nLead, mentor, and develop a team of Threat Operations Analysts, ensuring high-quality output and strong technical performance.\nOversee day-to-day workflow, case allocation, and SLA management.\nConduct regular quality reviews of analyst findings, advisories, and attribution assessments.\nSupport hiring, onboarding, training, and ongoing professional development of team members.\nOperational Oversight\nEnsure accuracy, consistency, and timeliness of threat and vulnerability notifications delivered to customers.\nMonitor operational metrics, case volumes, detection triggers, and workload distribution.\nDrive continuous improvement of processes, documentation, and internal playbooks.\nCoordinate closely with Threat Research Teams to ensure smooth integration of new detection patterns, use cases, and scanning methodologies.\nTechnical Escalation\nServe as the senior escalation point for complex exposure validation, disputed asset ownership, unusual detections, or high-impact vulnerabilities.\nSupport Underwriting, Customer Support, and Claims with expert analysis when required.\nCross-Team Collaboration\nWork with Threat researchers to feed back real-world findings, false positive trends, and enhancement opportunities for detection pipelines.\nCollaborate with the Cyber Engineering and Data teams on tooling, automation, and dataset improvements.\nEnsure alignment between Onsite and Sri Lanka Cyber Operations teams.\nCustomer and Stakeholder Engagement\nOversee the quality of outbound advisories and ensure communications meet standards.\nEngage directly with brokers or customers for complex cases requiring senior technical clarification.\nRepresent the Cyber Operations function in internal reviews, presentations, and cross-department initiatives.\nStrategic Contribution\nHelp shape the roadmap of the Cyber Operations function and contribute to the evolution of risk-reduction services.\nIdentify operational gaps, process inefficiencies, and opportunities for automation or improved accuracy.\nSupport the rollout of new service lines, detection logic, and operational capabilities.\nRequirements\nStrong foundational understanding of networking (TCP/IP, ports, protocols) and common internet-facing services.\nExcellent grasp of vulnerability mechanics, CVE/CVSS scoring, adversary behaviours, and exploitation principles.\nExperience using exposure assessment tools and datasets (Shodan, Censys, LeakIX, Nuclei, DNS/WHOIS investigations).\nAbility to review and validate complex attribution or mitigation scenarios.\nSkilled at translating technical issues into clear, actionable customer-ready communication.\nSenior experience in a cyber operations, SOC, MSSP, threat monitoring, or similar environment.\nDemonstrated experience leading or mentoring analysts or managing operational workflows.\nProven background in exposure validation, or threat verification.\nExperience working across distributed teams is advantageous.Certifications (Desired but Not Essential)\n\nCompTIA Security+, CySA+, Network+, or equivalent vendor-neutral certifications.\nGIAC, eLearnSecurity, or other advanced training is beneficial.","description_format":"text","description_chars":3140,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[{"name":"Sri Lanka","iso":"LK","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-15T03:42:37Z"}],"visa":[],"liveness":{"score":52,"band":"ok","label":"Likely open","p_open":1,"p_active":0.522,"p_room":1,"age_days":9,"expected_fill_days":27,"reasons":["conf:2","agency","velocity","win:early","comp:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/george-bernard-cyber-operations-team-lead","json_url":"https://alion.io/job/george-bernard-cyber-operations-team-lead.json","meta":{"generated_at":"2026-10-25T02:47:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4238,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4423584},"rest":"https://alion.io/mcp/rest/get_company?id=4423584"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgeorge-bernard-cyber-operations-team-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgeorge-bernard-cyber-operations-team-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgeorge-bernard-cyber-operations-team-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/george-bernard-cyber-operations-team-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgeorge-bernard-cyber-operations-team-lead"}]}