Manager, Security Operations | Remote, USA

View full description

Requirements:

• Bachelor's Degree from four-year college or university Information Technology, Information Security/Assurance, Engineering or similar area of study required
• 10+ years professional IT and Information Security experience
• 5+ years professional experience in cyber operations centers
• 3+ years professional experience in managed services
• Deep understanding of SIEM and Endpoint  vendors, solutions and architecture such as LogRhythm, QRadar, Splunk, Exabeam, CrowdStrike, SentinelOne, Microsoft ATP, etc.
• Understanding of regulatory compliance such as NIST, SOX, HIPPA, NERC CIP, PCI, etc. and their differentiators across global regions
• Understanding of Security Orchestration, Automation and Response concepts.
• Experience working with ticketing and knowledge management systems such as Service Now.
• Experience with ITIL concepts and practices.
• Experience with security analytics platforms.
• CompTIA Security+ Certification One or more certifications in Security/Networking Upon Hire preferred
• CISSP Certified Information Systems Security Professional One or more certifications in Security/Networking Upon Hire preferred
• GSEC Upon Hire preferred
• GCIA Upon Hire preferred
• GCIH Upon Hire preferred
• Certified Project Management Professional (PMP)-PMI Upon Hire preferred

Responsibilities:

• Lead and manage Security Operations Center.
• Ensure quality security alert triage and analysis, incident identification, assessment, reporting, communication, mitigation and monitoring related to Optiv’s Managed Detection and Response service offerings.
• Build and improve integration process as needed to continue to improve service efficiency, effectiveness and client satisfaction
• Drive the responsiveness to the client(s) of the entire Cyber Operations organization
• Monitor service delivery for contractual compliance
• Review policies and highlight the challenges in managing SLAs with a focus on quality security analysis and updates to clients.
• Regularly review and revise standard operating procedures and protocols to ensure SOC continues to effectively meet operational requirements.
• Perform threat management, threat modeling, identify threat vectors and develop use cases for security monitoring.
• Creation of reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt.
• Routinely engage with cross functional teams to evaluate SOCs ability to meet stakeholder needs.
• Evaluate existing technical capabilities and systems and identify opportunities for improvement.
• Develop and mentor staff through open communication, training and development opportunities, and performance management processes to ensure team proficiency; build and maintain employee morale and motivation.
• Conduct after action reviews to identify lessons learned and best practices.
• Work closely Security Leadership to identify implement process changes, improvements and efficiencies and ensure solid security practices.
• Develop communication channels with technology owners and the business to evangelize the evolving threat landscape.
• Coordinate actions between clients and the appropriate service delivery departments to ensure needs are met
• Performs other duties as assigned
• Complies with all policies and standards