Manager, Cyber Defense Center

Position Overview:

We are seeking a highly skilled and experienced Manager or Manager to lead our Cyber Defense Center. The ideal candidate will be responsible for overseeing the operation and management of advanced cybersecurity technologies and processes, including Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Threat Hunting, and Incident Response technologies. The candidate will also be responsible for managing and coordinating the response to major cybersecurity incidents, ensuring minimal impact on business operations and swift resolution. This role requires a strategic thinker with a strong technical background and the ability to lead a team of cybersecurity professionals.

What You'll Do

• Oversee the continuous monitoring of networks, systems, and applications for security incidents or anomalies, utilizing various Cyber Defense tools and technologies
• Develop and maintain incident response plans, procedures, and playbooks to effectively respond to cyber security incidents
• Serve in the role of Incident Manager as a primary point of contact for cyber security incidents, coordinating communication and collaboration with internal teams and external stakeholders.
• Lead investigations into security incidents to determine the root cause, scope, and impact of the incident.
• Continually develops and manages strategy and maturity of the cybersecurity operations program by partnering with key stakeholders across the organization
• Manage Cyber Defense Team (Security Operations Center) operating in 24x7x365 for detection and response
• Conduct post-incident analysis and lessons learned reviews to identify areas for improvement and implement corrective actions to prevent future incidents.
• Provide leadership and guidance during crisis situations, including coordinating cross-functional teams and communicating with senior leadership and stakeholders.
• Stay current on emerging cyber threats, attack techniques, and trends, and incorporate relevant insights into incident response strategies and procedures.
• Develop and deliver incident response reports, presentations, and other communications to senior leadership and stakeholders.

Key Responsibilities:

• Leadership and Management: Lead and manage the 24/7 Cyber Defense Center team, providing guidance, mentorship, and support to ensure effective performance and professional development.
• SIEM and SOAR Operations: Oversee the deployment, configuration, and management of SIEM and SOAR platforms to ensure optimal performance and threat detection capabilities.
• Threat Hunting: Develop and implement threat hunting strategies to proactively identify and mitigate potential security threats.
• Incident Management: Lead daily operations of the Security Incident Response Team and serve as incident commander for major incidents.
• Collaboration: Work closely with other departments, including IT, Risk Management, and Compliance, to ensure a cohesive and comprehensive approach to cybersecurity.
• Continuous Improvement: Stay current with the latest cybersecurity trends, threats, and technologies, and continuously improve the Cyber Defense Center’s capabilities and processes.
• Metrics and Reporting: Recommend and produce key metrics, KPIs, and New Initiatives reports for internal review and for Senior Leadership Team.
• Roadmap Development: Lead roadmap development and stay current with program capabilities, suggesting enhancements as needed.
• Thought Leadership: Provide thought leadership for program improvements and new initiatives.

Qualifications:

• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. A master’s degree is preferred.
• Experience: Minimum of 7-10 years of experience in cybersecurity, with at least 3-5 years in a leadership role.
• Technical Skills: Proficiency in SIEM, SOAR, threat hunting, and incident response technologies and methodologies.
• Certifications: Relevant certifications such as CISSP, CISM, CEH, or equivalent are highly desirable.
• Leadership Skills: Strong leadership and team management skills, with the ability to motivate and inspire a team.
• Communication Skills: Excellent verbal and written communication skills, with the ability to effectively communicate complex technical concepts to non-technical stakeholders.
• Problem-Solving: Strong analytical and problem-solving skills, with the ability to think strategically and make data-driven decisions.
• Flexibility: Candidate must be flexible to operate during off business hours and weekends to handle the Cyber Incident Response function (only when needed)