Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 12 days ago

Manager-Cyber Security

CrossCountry Consulting97 open roles

Where
Los Angeles, CA
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowManager-Cyber SecurityCrossCountry Consulting · Los Angeles, CA

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on CrossCountry Consulting's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. CrossCountry Consulting postings stay open a median of 9 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 12 days ago

CrossCountry Consulting median: 9 days open

The posting

From the beginning, our goal was to establish an advisory firm that stands apart from the rest – one that is grounded in our Core Values and dedicated to creating a positive experience not just for our clients, but for our people too. We firmly believe in the strength of collaboration, enthusiasm, generosity, and perseverance as the driving forces behind our success. With advisory solutions spanning accounting and risk, technology-enabled transformation, and transactions, we partner with our clients to solve today’s challenges and deliver present and future value.

Our commitment to our people has earned us numerous awards including Inc5000's Fastest Growing Companies and Glassdoor's Best Places to Work. Explore what our employees have to say about our unique culture by clicking here.

We are seeking a technically strong Cybersecurity Manager to join our high-performing Cybersecurity & Privacy practice. This is a hands-on role requiring deep expertise across cloud security architecture, security engineering, risk and compliance frameworks, and threat modeling. The ideal candidate brings a strong technical foundation and the ability to design, implement, and assess security solutions across complex client environments. The position is hybrid (60% on-site/client, 40% remote) with local travel

What You'll Do

  • Assess and mature IAM programs, including identity governance, privileged access, SSO/MFA, joiner-mover-leaver, access reviews, and least privilege across on-prem and cloud (Okta, Microsoft Entra ID, SailPoint, CyberArk, BeyondTrust)
  • Design cloud security architectures for AWS, Azure, and GCP, including identity federation, segmentation, encryption, and logging (AWS IAM/KMS, Azure Policy, GCP IAM, HashiCorp Vault)
  • Implement controls for containers, infrastructure-as-code, and serverless, with focus on workload identity, secrets management, and policy-as-code (Kubernetes, Terraform, CloudFormation, Open Policy Agent, Checkov)
  • Design API security standards and secure integration patterns, including OAuth 2.0/OIDC, service-to-service authentication, and gateway controls (Apigee, Azure API Management, AWS API Gateway)
  • Conduct risk and maturity assessments using ISO 27001, NIST CSF 2.0, CIS 18, PCI-DSS, NIST 800-53, CSA CCM, and MITRE ATT&CK, emphasizing identity and cloud controls
  • Perform security tool gap analysis, consolidation, and implementation across vulnerability management, endpoint, SIEM, IDS/IPS, firewall, and cloud platforms (Tenable, Qualys, CrowdStrike, Splunk, Microsoft Sentinel, Palo Alto Networks, Wiz, Prisma Cloud)
  • Lead security transformation programs covering architecture, implementation, and remediation, with a zero trust, identity-centric approach (Zscaler, Netskope)
  • Perform threat modeling and penetration testing advisory, including identity-based attack paths and cloud misconfigurations (BloodHound, Pacu, Burp Suite)
  • Apply MITRE ATT&CK to map adversary techniques and inform controls and detection coverage (ATT&CK Navigator, Atomic Red Team)
  • Drive capability uplift across IAM, Vulnerability Management, Incident Response, IT DR, Business Continuity, Threat Intelligence, and Security Monitoring (ServiceNow, Recorded Future, Mandiant)
  • Assess IR readiness; design playbooks for identity compromise and cloud incidents and facilitate technical tabletop exercises (Cortex XSOAR, Splunk SOAR, Microsoft Defender XDR)
  • Review and harden application and system DR plans, identifying gaps and developing remediation playbooks (AWS Elastic Disaster Recovery, Azure Site Recovery, Veeam, Zerto)
  • Engineer controls for code scanning (SAST/DAST) and application and infrastructure monitoring, including IAM policy analysis and identity threat detection (Snyk, Checkmarx, SonarQube, Datadog, Entra ID Protection)
  • Implement and advise on PCI-DSS compliance and support CCPA/CPRA and GDPR privacy audits (OneTrust, Drata, Vanta)
  • Serve as a proactive project leader and self-starter, driving engagement timelines, deliverables, and client confidence forward without needing direction
  • Manage multiple concurrent workstreams across assessment, implementation, and compliance activities — keeping teams organized, prioritized, and on schedule across all threads
  • Anticipate risks, dependencies, and roadblocks before they escalate, bringing well-reasoned solutions to clients and internal stakeholders proactively
  • Lead and coordinate cross-functional project teams across Senior Associates and other practice members, delegating effectively to maintain quality, accountability, and momentum throughout the engagement lifecycle
  • Own the full arc of engagement success — from initial scoping and project planning through final delivery — taking personal accountability for client satisfaction, output quality, and measurable outcomes

What You'll Bring

  • Bachelor's degree required in Information Systems, Computer Science, Mathematics, or a related technical field
  • Minimum of 5 years of Big 4 or related consulting/professional services experience with hands-on Cybersecurity engineering and advisory expertise
  • CISSP — Certified Information Systems Security Professional
  • CCSP — Certified Cloud Security Professional
  • AWS Certified Security Specialty, Microsoft SC-100/AZ-500, or equivalent cloud security certification
  • CISM, CEH, OSCP, or other relevant security certifications a plus
  • Cloud platforms: hands-on experience with AWS, Azure, and/or GCP security services and native security tooling
  • Cloud-native security: containers (Docker, Kubernetes), IaC (Terraform, CloudFormation, Bicep), serverless security, and CI/CD pipeline security
  • Network security: Firewalls (Palo Alto, Fortinet, Cisco), VPN, IDS/IPS, micro segmentation, and zero-trust architecture
  • Endpoint & identity security: EDR/XDR platforms, PAM, IAM, MFA, and SSO solutions
  • Vulnerability management: Tenable, Qualys, Rapid7, or equivalent; familiarity with CVSS scoring and patch prioritization
  • Application security: SAST/DAST tooling, API security testing, secure SDLC practices, and code scanning platforms

Benefits Summary

The CrossCountry total rewards package includes comprehensive healthcare options, including medical, dental, and vision coverage; flexible spending accounts; and a 401(k) with company matching. Additionally, employees can take advantage of generous parental and maternity leave policies, technology stipends, and wellness reimbursement programs, all designed to support both professional growth and personal well-being. For detailed information about benefits at CrossCountry, please visit our dedicated benefits site: https://www.crosscountry-consulting.com/careers/benefits/.

Equal Employment Opportunity (EEO)

CrossCountry provides equal employment opportunities (EEO) to all employees and applicants for employment and believes that respect and fair treatment are critical to creating a productive and inclusive workplace.

As an equal opportunity employer, CrossCountry is fully committed to comply with all federal, state, and local laws and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability, pregnancy, genetics, sexual orientation, veteran status, gender identity or expression or any other protected characteristic. The company also complies with pay transparency and labor laws applicable to all terms and conditions of employment.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against CrossCountry Consulting's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on CrossCountry Consulting's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    CrossCountry Consulting's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.