{"id":1333923,"url":"https://alion.io/job/schellman-manager-of-security-operations-and-infrastructure","title":"Manager of Security Operations and Infrastructure","company":{"id":1754862,"name":"Schellman","domain":"schellman.com","url":"https://alion.io/company/schellman","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":{"label":"ET","utc_offset_min":-5,"utc_offset_max":-5},"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":120000,"max_usd":214000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":340},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"DLP","optional":false},{"name":"FedRAMP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Okta","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-09T00:00:00Z","employer_posted_date":"2026-09-09","last_verified_at":"2026-10-19T20:31:14Z","board_verified":true,"closed_at":null,"days_open":41,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":41},"description":"Schellman is a Top 50 CPA firm and a leading provider of attestation and compliance services. Our professional services focus on security and privacy audits, assessments, and certifications. Schellman has become one of the largest cybersecurity assessment firms in the United States without providing any traditional accounting services. We are an accredited multi-framework ISO Certification Body for security, privacy, business continuity, and quality; a globally licensed PCI Qualified Security Assessor and a top provider to clients serving the federal DoD space as a leading FedRAMP 3PAO and the first assessment firm authorized as a CMMC C3PAO. Our specialty and expertise remain in providing best in class Cybersecurity and IT Audits and Attestations. Our culture, approach with clients, and dedication to our values has led us to consistently be a Great Places to Work certified company and rated as a Best Firms to Work For by Accounting Today and a Glassdoor Best Places to Work. We deeply appreciate our employees, as shown by our first core value - People Come First. This is demonstrated in our culture, benefits, and how we handle business. Come see what makes Schellman special!\nJOB SUMMARY\nApplication Process:\nYou must complete this exercise to be considered for this role.\nPlease send your resume as well as an answer to the question below in lieu of a cover letter. This is a short exercise to simulate a chat/email request you might be asked in this role. It should take about 15 minutes and is intentionally open-ended, you can go into as much or little detail as you feel is necessary. Communicate in whatever ways work best for you (words, diagrams, etc.) to share your solution.\nBe sure to label the document in this format: FirstName_LastName_SchellmanDevOpsExercise\nASSESSMENT QUESTION 1: Security Control Implementation & Operational Impact\nYou're tasked with implementing DLP (Data Loss Prevention) enforcement across the organization. This will require significant coordination between security and the business, impact user workflows, and affect multiple systems. Describe your approach to: (1) Assessing operational and business impact before rollout, (2) Building alignment and buy-in across Leadership, (3) Planning and phasing the implementation to minimize disruption, and (4) Measuring success without compromising critical business operations.\nASSESSMENT QUESTION 2: Team Capability Development\nYour security and infrastructure team is growing. Describe how you would: (1) Identify skill gaps and capability needs across the team, (2) Decide between hiring specialists versus developing existing team members' capabilities, and (3) Create a mentorship or learning plan to build expertise\nASSESSMENT QUESTION 3: Cloud Infrastructure Scaling for Growth\nAs the organization grows, your cloud infrastructure must scale reliably and cost-effectively. Describe your approach to: (1) Assessing current infrastructure capacity and identifying gaps for future growth, (2) Planning a scaling strategy that balances performance, cost, and operational complexity, and (3) Explain your framework for deciding which processes, tasks, or functions deserve automation investment and why, given limited resources and time.\nThe Manager of Security Operations & Infrastructure is a hands-on player-coach leadership role responsible for the security and operational integrity of Schellman's technology infrastructure. This role oversees the Security Operations (SecOps) and DevOps functions, with a primary emphasis on building and maturing the SecOps program. This role reports to the Director of IT and is a key member of the CTO organization, contributing to IT strategy, security governance, and cross-functional initiatives across a ~500-person professional services firm.\nEssential Functions:\nLead and mature Schellman's SecOps program, including threat detection, incident response, vulnerability management, and security monitoring\n\nOwn the day-to-day operations of security tooling across the environment, including EDR, SIEM, and related platforms\n\nDrive security incident response processes, including escalation procedures, post-incident reviews, and continuous improvement\n\nPartner with Compliance and Risk teams to support internal security controls and other frameworks relevant to Schellman's operations\n\nManage and develop SecOps Engineers, providing mentorship, prioritization support, and career growth opportunities\n\nLead vulnerability management efforts including prioritization, remediation tracking, and executive reporting\n\nProvide management oversight for the DevOps team\n\nPartner with the Senior DevOps Engineer on technical direction, infrastructure decisions, and delivery execution - leveraging their expertise while providing organizational leadership and prioritization support\n\nChampion security integration across the DevOps lifecycle, including CI/CD pipeline security, IaC security standards, and cloud security posture management\n\nSupport cloud security operations across AWS and Microsoft Azure environments\n\nServe as a key stakeholder in Schellman's IT governance and AI governance programs\n\nCollaborate with the Director of IT and CTO on security strategy, roadmap planning, and budget inputs\n\nRepresent the SecOps and DevOps functions in cross-departmental initiatives\n\nCommunicate security posture, risks, and program updates clearly to IT leadership and non-technical stakeholder\n\nKnowledge, Skills, and Abilities:\n5+ years of experience in security operations, cybersecurity engineering, or a related discipline\n\n1-3 years of people management or formal team lead experience\n\nStrong working knowledge of SecOps domains: SIEM, EDR, incident response, threat intelligence, and vulnerability management\n\nFamiliarity with DevOps concepts and cloud infrastructure - enough to lead DevOps engineers effectively and speak credibly to technical decisions\n\nHands-on experience with Microsoft and Okta security and identity platforms preferred\n\nExcellent communication skills with the ability to translate technical risk into business context\n\nCollaborative, low-ego leadership style - comfortable empowering technical leads and building consensus across functions\n\nOur ideal candidate is located in the Eastern time zone\n\nEducation, Work Experience and Certifications :\nSecurity certifications such as CISSP, CISM, Security+, or equivalent\n\nExperience at a professional services, audit, or compliance firm\n\nExposure to SOC 2, FedRAMP, CMMC, or ISO 27001 is a strong plus\n\nSchellman is an equal opportunity employer (EOE) and strongly supports diversity in the workplace; therefore, providing equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law. Schellman uses E-Verify in our hiring process.\nAt Schellman, we strive to provide a flexible and balanced environment and therefore offer the opportunity to work remotely, unless otherwise stated in the job requirements. Connecting, collaborating and continuous education are also highly valued and therefore we require some travel annually for our Internal Service Delivery roles, which can include in-person training, team meet-ups, and strategy meetings. Service Delivery team members will also be required to travel based on business and client needs.","description_format":"text","description_chars":7532,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Growth opportunities"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Professional Services","Penetration Testing","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-27T13:32:31Z"}],"visa":[],"liveness":{"score":42,"band":"fade","label":"Fading","p_open":0.9,"p_active":0.843,"p_room":0.55,"age_days":40,"expected_fill_days":40,"reasons":["conf:52","win:tail"],"computed_at":"2026-10-19T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/schellman-manager-of-security-operations-and-infrastructure","json_url":"https://alion.io/job/schellman-manager-of-security-operations-and-infrastructure.json","meta":{"generated_at":"2026-10-20T05:12:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5755,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1754862},"rest":"https://alion.io/mcp/rest/get_company?id=1754862"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fschellman-manager-of-security-operations-and-infrastructure"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fschellman-manager-of-security-operations-and-infrastructure"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fschellman-manager-of-security-operations-and-infrastructure"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/schellman-manager-of-security-operations-and-infrastructure\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fschellman-manager-of-security-operations-and-infrastructure"}]}