Cyber Operate - Service Delivery Manager

Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join us to help clients navigate the evolving threat landscape through managed services that simplify complexity, strengthen resilience, and support secure growth. As a Service Delivery Manager, you will lead the delivery and ongoing development of a client's security operations program, bringing together people, technology, and service performance.

Recruiting for this role ends on 02/15/2027.

Work you'll do

As a(n) Lead Managed Services Engineer II on the Cyber Operate Offering team, you will be responsible for...

• Lead the end-to-end delivery of security operations center (SOC) services, including threat intelligence, threat hunting, detection engineering, security information and event management (SIEM) engineering, automation, and incident response.
• Establish service priorities and manage resource plans, budgets, forecasts, and service commitments across account teams.
• Build trusted relationships with client, account, and practice leaders; align service delivery with client priorities and identify opportunities to improve and expand services.
• Define and monitor service, operational, financial, and client-outcome metrics; lead account reviews; communicate performance; and resolve or escalate delivery risks and decisions.
• Serve as incident commander when designated; apply incident lessons learned and emerging-threat insights to improve detections, hunting priorities, playbooks, automation, documentation, quality controls, and service operations.
• Coach team members, coordinate work across security operations center teams and client stakeholders, and promote consistent delivery practices and continuous improvement.
  
  

A successful candidate would possess these skills:

• Ability to work independently and collaborate as part of a team
• Effective written and verbal communication skills
• Meticulous attention to detail and quality of work product
• Ability to build and sustain professional relationships
• Ability to lead projects or workstreams
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
• Strong interpersonal skills and professional demeanor
• Ability to meet deadlines
• Ability to mentor and provide clear guidance to others
  
  

The team

Our Cyber Operate Offering operates clients' critical cyber assets as a fully managed service or in partnership with clients. We bring together talent, technology, and processes to operate and improve client cyber capabilities, including security operations, threat intelligence, identity lifecycle services, application security, business transformation, and continuous compliance.

Qualifications

Required:

• Bachelor of Science with a concentration in computer science, information systems, information security, math, decision sciences, risk management, engineering (mechanical, electrical, industrial) or other business/technology disciplines or equivalent work experience
• 5+ years working in security information and/or technology engineering support experience
• Certified Information Systems Security Professional (CISSP), Certification in Certified Intrusion Analyst (GIAC), Continuous Monitoring (GMON), Certified Ethical Hacker (CEH) or equivalent
• Experience in security technologies such as: Security information and event management (SIEM), IDS/IPS, Data Loss Prevention (DLP), Proxy, Web Application Firewall (WAF), Endpoint detection and response (EDR), Anti-Virus, Sandboxing, network- and host- based firewalls, Threat Intelligence, Penetration Testing, Advanced Persistent Threats (APT)
• 2+ years of demonstrated client facing skills, and customer success management (preferred in the MSSP space)
• Understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity, etc.
• Understanding of common network infrastructure devices such as routers and switches
• Understanding of basic networking protocols such as TCP/IP, DNS, HTTP
• Basic knowledge in system security architecture and security solutions
• Limited immigration sponsorship may be available.
  
  

Preferred:

• Proven ability to translate complex information sets into specific recommendations that can be actioned by customers to enhance their security posture
• Strong understanding of threat analysis and enterprise level mitigation strategies
• Working knowledge of how malicious code operates and how technical vulnerabilities are exploited
• Working knowledge of operating systems and networking technologies in general
• Working knowledge of cyber threats, defenses, motivations and techniques
• Excellent interpersonal and organizational skills
• Excellent oral and written communication skills
• Strong analytical and problem-solving skills
• Self-motivated to improve knowledge and skills
  
  

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $135,500 - $265,100.

You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.