Senior Manager, Cybersecurity Operations

The NFL Cybersecurity Operations team is responsible for safeguarding the organization's digital assets by ensuring the confidentiality, integrity, and availability of critical data, systems, and services. Through continuous monitoring, rapid incident response, and proactive threat management, the team defends the enterprise against an evolving cyber threat landscape. We are seeking a Senior Manager, Cybersecurity Operations to lead the NFL's Cybersecurity Operations Center (CSOC). This leader will oversee the Cybersecurity Operations program and drive the continued evolution of our 24x7x365 security operations capability, transforming it from a primarily reactive, alert-driven function into a proactive, intelligence-led, and highly automated cyber defense program. Reporting as a key leader within the cybersecurity organization, this individual will help define and execute the strategic vision for the "CSOC of the Future,” where they will shape the operating model, technology strategy, and roadmap by leveraging automation, orchestration, agentic AI, advanced analytics, and emerging security capabilities to strengthen cyber resilience, enhance threat detection and response, and improve operational effectiveness across the enterprise. Responsibilities: Lead the day-to-day operations and strategic direction of the 24/7/365 Cybersecurity Operations Center (CSOC). Lead incident response activities for high-priority cybersecurity events and oversee post-incident reviews and continuous improvement. Expand proactive threat hunting using threat intelligence, behavioral analytics, and AI-assisted investigations. Working closely with IT infrastructure, cloud, engineering, risk, and business leaders, this individual will help to define and deliver the future state of cybersecurity operations, ensuring the organization can rapidly detect, investigate, and respond to threats while maximizing productivity and reducing operational complexity. Collaborate with third-party security providers and managed security service providers (MSSP)s to optimize service delivery and operational effectiveness. Support major business events and critical operations by ensuring continuous monitoring and rapid incident response capabilities. Lead the SOC of the Future Develop and execute the strategic roadmap for a modern Cybersecurity Operations Center built on automation, orchestration, AI, and agentic AI. Define the future operating model for security operations, balancing human expertise with autonomous security capabilities. Champion continuous modernization initiatives that improve resilience, scalability, and analyst effectiveness. AI, Automation & Orchestration Strategy Develop and execute the roadmap for a modern, AI-enabled SOC focused on automation, orchestration, and continuous operational improvement. Develop playbooks and orchestrated workflows using SOAR technologies to improve consistency, speed, and scalability. Leverage agentic AI and machine learning to automate repetitive analyst tasks, improve triage accuracy, alert enrichment, response actions, accelerate investigations, and enable autonomous response where appropriate. Identify opportunities to eliminate operational inefficiencies through intelligent automation and workflow optimization. Sponsor development of automation playbooks and integrations across the cybersecurity technology stack. Operational Excellence Lead, mentor, and develop a high-performing cybersecurity operations team while fostering innovation and continuous learning. Lead Security Operations, Detection Engineering, Incident Response, Threat Hunting, and Security Automation teams. Establish KPIs that measure operational maturity, automation effectiveness, analyst productivity, detection quality, and response performance. Drive continuous improvement in Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), alert fidelity, and analyst capacity through technology optimization. Security Technology Strategy Drive integrati…