IT Cybersecurity Operations Manager

About this role

Company Overview KLA is a global leader in diversified electronics for the semiconductor manufacturing ecosystem. Virtually every electronic device in the world is produced using our technologies. No laptop, smartphone, wearable device, voice-controlled gadget, flexible screen, VR device or smart car would have made it into your hands without us. KLA invents systems and solutions for the manufacturing of wafers and reticles, integrated circuits, packaging, printed circuit boards and flat panel displays. The innovative ideas and devices that are advancing humanity all begin with inspiration, research and development. KLA focuses more than average on innovation and we invest 15% of sales back into R&D. Our expert teams of physicists, engineers, data scientists and problem-solvers work together with the world’s leading technology providers to accelerate the delivery of tomorrow’s electronic devices. Life here is exciting and our teams thrive on tackling really hard problems. There is never a dull moment with us.

Group/Division The Information Technology (IT) group at KLA is involved in every aspect of the global business. IT’s mission is to enable business growth and productivity by connecting people, process, and technology. It focuses not only on enhancing the technology that enables our business to thrive but also on how employees use and are empowered by technology. This integrated approach to customer service, creativity and technological excellence enables employee productivity, business analytics, and process excellence.

Job Description/Preferred Qualifications We are seeking a, IT Cybersecurity Operations Manager to lead the strategy, deployment, and operations of endpoint security technologies across the enterprise. This role owns the endpoint security toolset end-to-end — from architecture and implementation to daily operations and continuous improvement — while managing a team of engineers and partnering closely with SOC, IT, and infrastructure teams. This role combines hands-on technical leadership with people and program management, ensuring endpoints are protected against modern threats while maintaining usability and business productivity.

Endpoint Security & Tools Ownership • Own and manage enterprise endpoint security platforms including EDR/XDR, endpoint protection, device control, DLP and endpoint privilege management agents .

• Lead the design, deployment, configuration, and optimization of endpoint security tools across Windows, macOS, and Linux environments.

• Ensure endpoint security tools integrate effectively with SIEM, SOAR, SOC workflows , and identity platforms.

• Define endpoint hardening standards, baselines, and security policies.

Operations & Incident Response • Oversee endpoint-related security incidents, investigations, and remediation efforts.

• Partner with SOC teams to improve detection, response, and automation related to endpoint threats.

• Manage tool health, agent performance, upgrades, and lifecycle management.

• Drive root cause analysis and continuous improvement following incidents.

People & Program Management • Lead, mentor, and develop a team of endpoint security engineers.

• Prioritize work, manage roadmaps, and track delivery of endpoint security initiatives.

• Establish operational processes, documentation, and KPIs for endpoint security tooling.

• Manage vendor relationships, licensing, and renewals.

Strategy & Stakeholder Collaboration • Define the security agents roadmap  aligned with Zero Trust and defense-in-depth strategies.

• Partner with Cybersecurity, IT operations, desktop engineering, IAM, and compliance teams to balance security and user experience.

• Evaluate new endpoint security technologies and lead POCs and rollouts.

Preferred Qualifications • Experience integrating endpoint tools with SIEM/SOAR  platforms (Elastic, Google SecOps, etc.).

• Familiarity with MDM/MAM  solutions (Intune, JAMF, Workspace ONE).

• Experience in regulated or large enterprise environments.

• Certifications such as CISSP, GCED, GCIA , SentinelOne, Proofpoint, or CyberArk certifications .

Minimum Qualifications Required Qualifications • Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent experience).

• 10+ years of experience in endpoint security or endpoint engineering , with 4+ years in a lead or management role .

• Strong hands-on experience with one or more endpoint security platforms such as: • EDR : SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Carbon Black

• DLP: Forcepoint, Proofpoint and Digital Guardian

• EPM: CyberArk, Beyond Trust

• Experience managing enterprise endpoint environments (Windows/macOS; Linux a plus).

• Solid understanding of endpoint attack techniques and MITRE ATT&CK.

Base Pay Range: $114,100.00 - $194,000.00 Annually

Primary Location: USA-MI-Ann Arbor-KLA

KLA’s total rewards package for employees may also include participation in performance incentive programs and eligibility for additional benefits including but not limited to: medical, dental, vision, life, and other voluntary benefits, 401(K) including company matching, employee stock purchase program (ESPP), student debt assistance, tuition reimbursement program, development and career growth opportunities and programs, financial planning benefits, wellness benefits including an employee assistance program (EAP), paid time off and paid company holidays, and family care and bonding leave.

Interns are eligible for some of the benefits listed. Our pay ranges are determined by role, level, and location. The range displayed reflects the pay for this position in the primary location identified in this posting. Actual pay depends on several factors, including state minimum pay wage rates, location, job-related skills, experience, and relevant education level or training. We are committed to complying with all applicable federal and state minimum wage requirements where applicable. If applicable, you

Similar jobs

• Sr Cybersecurity Manager — Netgear · San Jose, CA
• Cyber Operations Lead — Accenturefederalservices · Arlington, VA
• Cybersecurity Operations Specialist 720 — Freedomconsulting · St. Louis, MO
• Cyber Security - Manager — Riveron · Remote
• Cybersecurity Manager/ISSO — GDIT · USA MD Andrews AFB | USA VA Langley AFB - 50 W Flight Line Rd (VAC387)
• Cyber Operations Analyst — Accenturefederalservices · Fort Meade, MD
• Cyber Security Program Manager — Ceribell · Sunnyvale, CA
• IT Security Operations Analyst — Alertmedia · Austin, TX HQ