Job details
Job type full-time
Full job description
Job description:
About the role:
The team leader security operations center (soc) is responsible for managing activities relating to monitoring and responding to security eventsAdditionally, this position is responsible for the development and oversight of the soc program to ensure personnel are managed and operational efficiencies are maintainedA leadership position, the soc manager works with multiple technology platforms and interfaces with other groups within it security operations, it security architecture, any offshore partners, and other technology and business functions.
The role requires technical competence and experience managing diverse teamsAdditionally, the role requires familiarity with recent threats and adversarial techniques, as well as the ability to quickly understand complex environmentsBusiness and interpersonal skills are essential to manage risk to the business, interface with other business units and develop soc analystsThe soc manager contributes to the company it security strategy and roadmap, and is an excellent communicator at both the staff and executive levels.
What you’ll do:
Oversea a team of associates and (potentially) onsite and offsite contractors to monitor for and respond to security events.
Plan and execute regular incident response and postmortem exercises, with a focus on creating measurable benchmarks to show progress (or deficiencies requiring additional attention).
Automate repetitive tasks and drive efficiencies so analysts can work on more advanced tasks.
Manage security event investigations, partnering with other departments as needed.
Evaluate and update soc policies and procedures as appropriate.
Develop metrics and scorecards to measure risk to the organization, as well as effectiveness and efficiency of soc associates.
Partner with the security engineering team to improve tool usage and workflow, as well as with the advanced threats and assessment team to mature monitoring and response capabilities.
Manage career development for a team of associates, including training and mentoring, conducting performance reviews and exhibiting behaviors to be modeled by team members.
Implement a “talent pipeline” to develop skills and capabilities for associates, ranging from interns to level iv analysts.
Focus on recruiting, developing and retaining employees.
Leverage strategic and tactical thinking.
About you:
Excellence in communicating business risk from cybersecurity issues.
Experience driving measurable improvement in monitoring and response capabilities at scale.
Experience managing security information and event management (siem) systems, threat intelligence platforms, security automation and orchestration solutions, intrusion detection and prevention systems (ids/ips), file integrity monitoring (fim), data loss prevention (dlp) and other network and system monitoring tools.
Experience in investigations using formal chain-of-custody methods, forensic tools and best practices.
Analytical and problem-solving mindset.
Highly effective communicator with ability to influence business units.
Track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.
Demonstrate effective decision-making skills.
Highly trustworthy; leads by example.
Ability to interact with internal/external clients/customers in a professional manner.
Qualifications and experience:
Bachelor’s degree in computer science, information assurance, mis or related field, or equivalent experience
Certification requirements – cissp; cism and/or sans certification a plus.
At least 7+ years of information security monitoring and response or related experience.
Prefer 3-5+ years of technical hands-on experience with endpoint detection and response products, including palo alto traps and xdr, fortinet, carbon black, and/or crowdstrike experience.
Prefer 5+ years working with security operations requirements relating to privacy, data security and governance frameworks including iso 27001, hipaa, pci, sarbanes oxley, and glba in a complex organizational environment.
Experience managing people, including technical staff.
Experience managing a 24x7 operational environment.
Why you should work here:
The ability to work in an environment that encourages creativity and fresh ideas
The ability to be on the leading edge of saas driven technology solutions for capital markets and regulatory disclosure requirements
The opportunity to join a well-established and growing company that has just completed its most successful year
About us: https://www.youtube.com/watch?v=hlsabwm9sum#action=share
