{"id":2809081,"url":"https://alion.io/job/rb-global-lead-cybersecurity-operations","title":"Lead, Cybersecurity Operations","company":{"id":2965322,"name":"RB Global","domain":"rbglobal.com","url":"https://alion.io/company/rbglobal","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":77,"open_postings":47,"ghost_share":0,"stale_share":0.915,"repost_share":0,"time_to_fill_p50_days":32,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Westchester, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":122000,"max_usd":252000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":453},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-07-07T16:51:57Z","employer_posted_date":"2026-07-07","last_verified_at":"2026-11-08T15:18:23Z","board_verified":true,"closed_at":null,"days_open":124,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":123},"description":"About the Role:\nWe are seeking a Lead, Cybersecurity Operations to play a critical role in advancing our global Cybersecurity Operations (CSOC) capabilities.\nThis individual will serve as a senior technical leader responsible for overseeing threat detection, incident response, and continuous improvement of security operations across the organization. As part of the Cybersecurity Operations Team, the Lead will drive operational excellence by enhancing detection strategies, improving incident response processes, and ensuring effective use of security technologies. This role acts as the primary technical escalation point for analysts and a key liaison between leadership and the SOC team-translating strategic direction into actionable work and ensuring meaningful outcomes.\nThis position requires a hands-on leader with deep technical expertise, strong operational awareness, and a passion for elevating both team performance and cybersecurity capabilities in a fast-paced, evolving threat landscape.\nResponsibilities:\nLead Cybersecurity Operations Execution & QualityOversee day-to-day security monitoring, detection, and response activities, ensuring high-quality investigations and timely remediation of security events and incidents.\n\nServe as Primary Technical Escalation PointAct as the go-to escalation resource for analysts, providing hands-on guidance for complex investigations and ensuring consistency and depth in investigative outcomes.\n\nOwn Incident Response Lifecycle & Stakeholder CoordinationLead and coordinate complex security incidents end-to-end, while acting as a liaison between leadership and the SOC-translating strategic direction into actionable tasks and delivering clear, meaningful updates.\n\n Drive Detection & Response Maturity (SIEM & Tooling)Lead SIEM-driven operations and continuously improve detection capabilities through use-case development, tuning, telemetry optimization, and enhanced coverage across security domains.\n\nCoordinate SME Programs & Operational InitiativesBreak down strategic cybersecurity objectives into actionable workstreams, track progress, remove blockers, and ensure successful execution of team initiatives.\n\nDevelop & Optimize Playbooks, Processes, and AutomationCreate and refine incident response playbooks, SOPs, and automation opportunities to improve consistency, efficiency, and scalability of operations.\n\n Leverage Metrics & Threat Insights to Drive ImprovementTrack key operational metrics (MTTD, MTTR, alert fidelity) and conduct advanced threat analysis to inform decisions, strengthen defenses, and continuously improve security posture.\n\nRequirements:\nBachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field (or equivalent practical experience).\nSecurity+, GCIH, GCIA, GCED, or equivalent certifications.\n5-8+ years of experience in cybersecurity operations or SOC environments \nProven experience leading or coordinating incident response activities \nHands-on experience with SIEM platforms and building detection-driven operations \nStrong familiarity with security technologies such as EDR, NDR, email security, WAF, and identity/security monitoring tools","description_format":"text","description_chars":3178,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Auctions","Marketplaces"],"lifecycle":[{"event":"open","at":"2026-10-18T08:37:35Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.324,"p_room":0.28,"age_days":123,"expected_fill_days":32,"reasons":["conf:9","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/rb-global-lead-cybersecurity-operations","json_url":"https://alion.io/job/rb-global-lead-cybersecurity-operations.json","meta":{"generated_at":"2026-11-08T18:50:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":39356,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2965322},"rest":"https://alion.io/mcp/rest/get_company?id=2965322"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frb-global-lead-cybersecurity-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frb-global-lead-cybersecurity-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frb-global-lead-cybersecurity-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rb-global-lead-cybersecurity-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frb-global-lead-cybersecurity-operations"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2809081}},{"tool":"search_jobs","arguments":{"company":"rbglobal.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2809081},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}