Lead, mentor, and manage a team of analysts and incident responders, fostering a culture of continuous improvement and collaboration.
Oversee real-time monitoring, analysis, and escalation of security events using SIEM, SOAR, and other security tools.
Develop, implement, and optimize SOC processes, playbooks, and standard operating procedures.
Coordinate incident response activities, ensuring timely investigation, containment, eradication, and recovery from cyber incidents.
Serve as the primary point of contact for major security incidents, coordinating with internal stakeholders and external partners as needed. Ensuring effective communication and coordination among stakeholders throughout the lifecycle of security incidents.
Stay informed on the latest cyber threats, vulnerabilities, and regulatory developments to adapt the organizations security posture proactively.
Prepare and deliver regular reports, metrics, and presentations to executive management regarding Cyber Defense Center's performance and emerging risks.
Support compliance efforts and audits related to cybersecurity frameworks (e.g., SOC2, ISO 27001).
Manage Cyber Defense Center's technology stack, including evaluating and recommending tools and solutions for threat detection and response.
Establish and lead a dedicated purple team to enhance detection, response, and resilience against threats.
Oversee real-time monitoring, analysis, and escalation of security events using SIEM, SOAR, and other security tools.
Develop, implement, and optimize SOC processes, playbooks, and standard operating procedures.
Coordinate incident response activities, ensuring timely investigation, containment, eradication, and recovery from cyber incidents.
Serve as the primary point of contact for major security incidents, coordinating with internal stakeholders and external partners as needed. Ensuring effective communication and coordination among stakeholders throughout the lifecycle of security incidents.
Stay informed on the latest cyber threats, vulnerabilities, and regulatory developments to adapt the organizations security posture proactively.
Prepare and deliver regular reports, metrics, and presentations to executive management regarding Cyber Defense Center's performance and emerging risks.
Support compliance efforts and audits related to cybersecurity frameworks (e.g., SOC2, ISO 27001).
Manage Cyber Defense Center's technology stack, including evaluating and recommending tools and solutions for threat detection and response.
Establish and lead a dedicated purple team to enhance detection, response, and resilience against threats.
Requirements:
5+ years of experience in cybersecurity.
3+ years in a Security Operation Management role.
Strong knowledge of security operations, incident response, threat intelligence, and digital forensics.
Experience with SIEM, EDR, SOAR, firewalls, and other SOC technologies.
Relevant certifications such as CISSP, CISM, GIAC, or equivalent are highly desirable.
Knowledge of attacker tactics, techniques, and procedures (TTPs), as well as methods for defense.
Excellent analytical, problem-solving, and organizational skills.
Exceptional communication skills, with the ability to convey complex security concepts to technical and non-technical audiences.
Ability to work under pressure, manage multiple priorities, and respond to high-impact incidents effectively.
Demonstrated experience in developing, tracking, and reporting on key performance indicators (KPIs) to measure SOC effectiveness and drive continuous improvement.
5+ years of experience in cybersecurity.
3+ years in a Security Operation Management role.
Strong knowledge of security operations, incident response, threat intelligence, and digital forensics.
Experience with SIEM, EDR, SOAR, firewalls, and other SOC technologies.
Relevant certifications such as CISSP, CISM, GIAC, or equivalent are highly desirable.
Knowledge of attacker tactics, techniques, and procedures (TTPs), as well as methods for defense.
Excellent analytical, problem-solving, and organizational skills.
Exceptional communication skills, with the ability to convey complex security concepts to technical and non-technical audiences.
Ability to work under pressure, manage multiple priorities, and respond to high-impact incidents effectively.
Demonstrated experience in developing, tracking, and reporting on key performance indicators (KPIs) to measure SOC effectiveness and drive continuous improvement.
This position is open to all candidates.
