Manager, Cybersecurity Operations

ABOUT GREYSTAR

Greystar is a leading, fully integrated global real estate company offering expertise in property management, investment management, development, and construction services in institutional-quality rental housing. Headquartered in Charleston, South Carolina, Greystar manages and operates over $300 billion of real estate in nearly 250 markets globally with offices throughout North America, Europe, South America, and the Asia-Pacific region. Greystar is the largest operator of apartments in the United States, manages over 1,000,000 units/beds globally, and has a robust institutional investment management platform comprised of nearly $78 billion of assets under management, including over $35 billion of development assets. Greystar was founded by Bob Faith in 1993 to become a provider of world-class service in the rental residential real estate business. To learn more, visit www.greystar.com.

JOB DESCRIPTION SUMMARY

We are seeking a strategic and hands-on Manager, Cybersecurity Operations to lead our efforts in defending against evolving cyber threats. This role is critical to safeguarding our digital assets and will play a key role in shaping the future of our cybersecurity operations. The ideal candidate will bring deep expertise in security operations, incident response, and team leadership, with a proven ability to manage third-party SOC providers, and drive operational excellence. This position offers the opportunity to lead a high-impact function that ensures the confidentiality, integrity, and availability of our enterprise systems through scalable, proactive, and intelligence-driven practices.

JOB DESCRIPTION

KEY RESPONSIBILITIES:

Operational Leadership

• Establish and enforce policies, procedures, and protocols related to security monitoring and incident response.
• Coordinate cross-functional incident response efforts and ensure timely resolution of security incidents.
• Manage relationships and performance of third-party SOC providers, ensuring alignment with internal processes, SLAs, and escalation protocols.
• Foster a culture of continuous learning and operational excellence within the team.

Monitoring & Threat Detection

• Oversee the configuration and optimization of SIEM tools and other security monitoring platforms.
• Ensure 24/7 threat monitoring, detection, triage, and escalation protocols are in place.
• Oversee alert triage processes to ensure timely and accurate investigation and escalation of security events.
• Lead proactive threat hunting initiatives to identify and mitigate advanced threats that evade traditional detection methods.

Incident Response & Investigation

• Lead investigations into security breaches and incidents, perform root cause analysis, and drive corrective actions.
• Develop and execute tabletop exercises and simulations to prepare the organization for various threat scenarios.

Playbooks & Automation

• Develop, maintain, and optimize incident response playbooks and standard operating procedures (SOPs).
• Drive automation of repetitive SOC tasks using SOAR platforms or custom scripting to improve efficiency, consistency, and response times.
• Ensure playbooks align with evolving threat landscapes and integrate with existing tooling and workflows.

Security Metrics & Reporting

• Define KPIs and generate regular reports on incident trends, threat intelligence, and SOC performance.
• Develop dashboards and visualizations to communicate SOC effectiveness to both technical and non-technical stakeholders.
• Present findings and strategic recommendations to executive leadership.

Continuous Improvement

• Continuously evaluate emerging technologies, methodologies, and threats.
• Drive improvement initiatives for tools, processes, and staff training to enhance operational efficiency.

BASIC KNOWLEDGE & QUALIFICATIONS:

• Bachelor’s degree in Information Security, Computer Science, or a related field.
• 5+ years of experience in security operations or incident response, including at least 2 years in a leadership role.
• Strong understanding of security technologies (SIEM, IDS/IPS, firewalls, endpoint protection, etc.).
• Proven experience with incident detection, response, forensics, and remediation.
• Demonstrated experience creating and maintaining security playbooks, and automating repetitive SOC tasks using tools such as SOAR platforms or custom scripting.
• Excellent analytical, problem-solving, and organizational skills.

SPECIALIZED SKILLS:

• Professio