Head of Cyber Operations - Client Solutions

What You Will Do

• Serve as the technical expert for EDR/MDR/XDR platforms (e.g., CrowdStrike, SentinelOne, Defender, CarbonBlack). Responsibilities include setup, continuous operation, complex query response, and strategic vendor evaluation.
• Demonstrate strong knowledge of consumer and enterprise-grade networking equipment (e.g., Palo Alto, Meraki, Araknis, Fortinet, Eero, Orbi, Google, Aruba) to diagnose and secure home networks.
• Deep knowledge of networking tools (VPN, Network Sniffers), consumer AV (Trend, BitDefender, Norton, McAfee), 2FA variants, and password management (1Password) to assist in the diagnosis and triaging of complex incidents but also to develop and delivery client solutions.
• Maintain deep expert knowledge of Google Workspace and Microsoft 365 (O365), and understand Mobile Device Management (MDM) and Remote Monitoring and Management (RMM) solutions (e.g., JAMF, Kaseya) for growing and scaling the service.
• Act as a technical SME for the Product team, ensuring the BlackCloak product is architected and positioned to never interfere with a client's complex, existing systems.
• Own the planning and execution of complex, large-scale migrations (e.g., swapping all client EDR platforms in under 30 days), ensuring pre-emptive strategic deployment to facilitate seamless transitions.
• Serve as a peer-level expert on Incident Response, working alongside senior staff on complex investigations involving account takeover (email, finance, social media), network breaches, and sophisticated malware/virus analysis.
• Lead the triage process for all incoming cyber, computer, network, and device incidents, establishing the initial root cause, containment strategy, and path to resolution.
• Possess practical experience and deep knowledge of penetration testing methodologies and vulnerability management across diverse client environments.
• Provide expert-level support and solution design for patching, backups, and encryption across all major operating systems: Windows, macOS, iOS, and Android.
• Understand the complex interactions of all deployed client tools (both commercial and proprietary) to anticipate and resolve conflicts or interferences.
• Proactively monitor and assess global cybersecurity, IT, and high-tech news, providing actionable intelligence on how emerging threats and technology impact the BlackCloak service model.
• Maintain a strong understanding of financial crime, identity theft, scams, and fraud targeting executives, classifying these threats as potential "Company Killers" for clients.
• Utilize basic forensic techniques to secure evidence and conduct initial analysis post-incident.