Cybersecurity Operations Manager

JOB PURPOSE:

Responsible for the management of daily operations SOC, on premise and hosted security technologies, directing incidents and leading the team.

KEY ACCOUNTABILITIES:

SOC Monitoring & Management

• Oversee the daily monitoring and review of security event activities and cyber threat landscape to ensure ongoing and continued maturity of the organization’s security controls.
• Manage resolution of cyber security incidents and coordinate with engineering support for security systems.
• Identify and diagnose potential threats, including root cause analysis and after-action reviews to ensure security controls defend the enterprise against malicious network attacks, including Firewalls, IPS etc.
• Manage customer relationships against SLAs, expectations, and contractual terms.
• Drive creation and implementation of custom alerting rules, searches, and dashboards for review and investigations.
• Oversee support ticket analysis to identify and implement improvements, reports findings, data, and KPIs to leadership.
• Own the design and engineering of key security tools, including the automation of tasks and processes through scripting and programming.
• Collaborate with internal teams to embed security, logging, auditing, and support needs during the software development lifecycle.
• Align processes internal to SOC to improve efficiency of analysts

Governance:

•  Implement NIST Cybersecurity Framework.
• Ensure security teams adherence to security controls and policies
• Ensure Segregation of Duties/Responsibilities

Reporting and Documentation (RD)

• Develop & streamline process and procedures for efficient operations of SOC.
• Conduct weekly/monthly service review meetings with relevant stakeholders.
• Ensure that the organization's data and infrastructure are protected by enabling the appropriate security controls.
• Perform routine audits on security of the infrastructure and present findings. 

Training and Development

• Ensure all certifications required for the role (see below) are met within 6 months of joining FutureX.
• Ensure all certifications are kept valid.
• Maintain knowledge of all relevant aspects of Security administration and expand areas of required speciality knowledge.
• Increase professional knowledge and awareness by reading and participating in technical events.

SPAN OF Communication: FutureX internal teams and customers

Job relevant information: This role will have decision-making authority.

REQUIRED QUALIFICATIONS/ CERTIFICATIONS:

• Bachelor’s degree in a related field
• CISSP: Certified Information Systems Security Professional
• CISM: Certified Information Security Manager
• GPEN: GIAC Penetration tester
• GREM: GIAC Reverse Engineering Malware
• GCFE: GIAC Certified Forensic Examiner
• ITIL Foundation

REQUIRED EXPERIENCE:

• 8-12 years

REQUIRED SKILLS:

• Complex problem solving
• Fluent spoken and written English
• The ability to make clear, engaging and concise presentations to FutureX customers

TECHNICAL COMPETENCIES

• SIEM, DLP, Active Directory, Email Security, Endpoint Security, IDS/IPS et al.
• Vulnerability Assessments
• Identity & Access Management Principles
• Advanced Persistent Threats (APT)
• Secure Coding Practices
• Proficiency in Python, C++, Java, Ruby and/or Power Shell

Bachelor’s degree in a related field