Manager, Cybersecurity Operations
Xeris Pharmaceuticals, Inc.
August 13, 2026
Remote friendly (Chicago, IL)
United States
IT
The Manager, Cybersecurity Operations owns day-to-day security operations and incident response with a strong focus on Microsoft Azure, Microsoft 365 (Defender, Purview, DLP, IRM), and key SaaS platforms.
Responsibilities:
- Lead security operations: monitor, triage, and respond to alerts across Azure, Microsoft 365, Windows 365, endpoints, identity, email, and core SaaS.
- Direct MDR/SOC partners with runbooks, SLAs, and high-quality investigations/escalations.
- Manage and coach the security operations team; partner with Infrastructure, Applications, Legal, Compliance, and business leaders.
- Build runbooks/SOPs; perform root cause analysis, basic forensics, and threat hunting.
- Drive incident lifecycle management (metrics, trends, remediation, lessons learned).
- Protect “crown jewel” assets via data classification, conditional access, and policy enforcement.
- Support governance (GRC administration, NIST-based assessments, security improvement tracking).
- Perform vendor cybersecurity due diligence and manage third-party risk with Procurement/Legal.
- Maintain inventory of security-relevant assets; support security awareness efforts.
- Partner on KPIs, operational risk metrics, and budget planning; identify automation opportunities.
Qualifications/Skills:
- Bachelor’s in CS/IS/Cybersecurity (or equivalent); 5+ years cybersecurity with leadership responsibility.
- Hands-on IAM, SIEM, and vulnerability management (Microsoft-centric preferred: Azure AD/Entra ID, Microsoft 365, Defender).
- Knowledge of NIST CSF, ISO 27001, CIS; proven incident response leadership and cross-functional communication.
Working conditions:
- Hybrid Chicago office; at least 3 days/week on-site; occasional evenings/weekends and periodic travel.
Compensation:
- Anticipated base salary: $120,000–$165,000.
Application instructions (accommodations):
- Email recruiting@xerispharma.com with the job requisition number to request reasonable accommodation; do not include medical/health info.
Responsibilities:
- Lead security operations: monitor, triage, and respond to alerts across Azure, Microsoft 365, Windows 365, endpoints, identity, email, and core SaaS.
- Direct MDR/SOC partners with runbooks, SLAs, and high-quality investigations/escalations.
- Manage and coach the security operations team; partner with Infrastructure, Applications, Legal, Compliance, and business leaders.
- Build runbooks/SOPs; perform root cause analysis, basic forensics, and threat hunting.
- Drive incident lifecycle management (metrics, trends, remediation, lessons learned).
- Protect “crown jewel” assets via data classification, conditional access, and policy enforcement.
- Support governance (GRC administration, NIST-based assessments, security improvement tracking).
- Perform vendor cybersecurity due diligence and manage third-party risk with Procurement/Legal.
- Maintain inventory of security-relevant assets; support security awareness efforts.
- Partner on KPIs, operational risk metrics, and budget planning; identify automation opportunities.
Qualifications/Skills:
- Bachelor’s in CS/IS/Cybersecurity (or equivalent); 5+ years cybersecurity with leadership responsibility.
- Hands-on IAM, SIEM, and vulnerability management (Microsoft-centric preferred: Azure AD/Entra ID, Microsoft 365, Defender).
- Knowledge of NIST CSF, ISO 27001, CIS; proven incident response leadership and cross-functional communication.
Working conditions:
- Hybrid Chicago office; at least 3 days/week on-site; occasional evenings/weekends and periodic travel.
Compensation:
- Anticipated base salary: $120,000–$165,000.
Application instructions (accommodations):
- Email recruiting@xerispharma.com with the job requisition number to request reasonable accommodation; do not include medical/health info.