This position requires a strategic mindset, assertiveness, and a proactive approach to managing and mitigating security threats.
Lead and manage a global team of SOC analysts, fostering a collaborative, high-performance work environment.
Provide mentorship, coaching, and professional development to team members.
Drive team excellence through effective performance management and goal setting.
Define and track key performance indicators (KPIs) to measure SOC effectiveness.
Prepare and present regular reports to senior leadership on security incidents, trends, and the overall security posture.
Oversee the implementation and continuous improvement of threat detection mechanisms.
Conduct in-depth analysis of security events and incidents to identify emerging threats.
Lead incident response efforts, ensuring timely and effective resolution of security incidents.
Collaborate with internal and external stakeholders to coordinate response efforts.
Evaluate, implement, and manage security tools and technologies to enhance the SOC's capabilities.
Stay abreast of the latest security trends and technologies to recommend improvements.
Develop and deliver security awareness training campaigns for employees to enhance the
organization's overall security posture.
Proven experience leading and managing global SOC teams.
At least three years of experience in security teams in a high-tech company.
Relevant certifications such as CISSP or equivalent.
Excellent understanding and proven hands-on experience with a leading Splunk SIEM system (defining and building correlation, aggregation, normalization, and parsing)
Experience in a SOAR system (Cortex XSOAR): Design and implementation an advantage.
Strong understanding of security principles, policies, and industry best practices
Networking knowledge understand networking essentials, components, data flows, architecture, ports, protocols, wireless, etc.
Familiarity with cloud services, cloud environment architecture, and the major cloud providers (AWS, GCP, Azure)
Solid understanding and practical experience in various Windows, macOS and Linux flavors, OS configuration, file system structures, OS components, mobile operating systems, etc.
Availability This role requires high availability.