Snr Manager, Cybersecurity Operations

At 2U, we are all in on purpose. We are motivated by our mission – to eliminate the back row in education – and connected by our shared passion to deliver world-class digital education at scale. As the parent company of edX, the world’s leading online learning platform, 2U powers more than 4,000 online higher education offerings – from free courses to full degrees. Together with more than 230 colleges, universities, and corporate partners, we are helping to unlock human potential. What We’re Looking For: As the Senior Manager of Cybersecurity Operations, you will lead and mature 2U’s global cyber defense and security operations capabilities. This role is accountable for the effective execution of threat detection, incident response, vulnerability management, and operational security monitoring across a global enterprise. You will manage and develop a team of security engineers responsible for day-to-day security operations, while also acting as the operational bridge between cybersecurity engineering, infrastructure, SRE, IT, and external partners (including managed or embedded resources). While remaining technically credible, your primary focus will be on operational excellence, incident readiness, process maturity, and ensuring consistent, high-quality execution of security operations at scale. This role requires strong leadership, sound judgment under pressure, and the ability to translate technical security events into clear risk-based communication for senior stakeholders. You will own operational outcomes, ensure alignment to industry frameworks, and continuously improve tools, processes, and team capability to reduce risk across 2U’s most critical systems. Responsibilities Include, But Are Not Limited To: Cybersecurity Operations Execution Own and oversee day-to-day cybersecurity operations, ensuring effective threat detection, investigation, response, and remediation across cloud, application, and infrastructure environments. Ensure security monitoring, alerting, and response processes are consistently executed, well-documented, and aligned to defined SLAs and severity models. Provide operational oversight of security tooling (e.g., SIEM, EDR, SOAR), ensuring tools are properly configured, maintained, and delivering actionable outcomes. Drive continuous improvement of operational runbooks, response workflows, and automation to reduce manual effort and improve response quality. Cybersecurity Incident Management Operational Readiness Own the cybersecurity incident management program, ensuring incidents are triaged, escalated, coordinated, and resolved effectively. Ensure clear roles, escalation paths, and communications are in place for security incidents, including coordination with SRE, Engineering, Infrastructure, IT, Legal, Privacy, and Communications teams. Lead post-incident reviews for security incidents, driving root cause analysis, remediation tracking, and systemic improvements. Ensure incident response practices align with industry standards and internal risk management expectations. Engineering, Cloud Application Security Alignment Partner with Cloud Security, Application Security, and Engineering teams to ensure security controls, detections, and response requirements are operationalised within cybersecurity operations. Ensure outputs from Cloud Security and Application Security initiatives (e.g., controls, detections, alerts, runbooks) are effectively integrated into security monitoring, incident response, and operational workflows. Act as the primary intake point for security-relevant operational signals from engineering and platform teams, ensuring they are triaged, prioritised, and actioned appropriately by cybersecurity operations. Collaborate with partner teams to identify gaps in detection, response coverage, and operational readiness, and drive improvements to expand and mature cybersecurity operations coverage. Serve as an escalation and advisory point for security-related opera ... (truncated, view full listing at source)