Description

You will manage the lifecycle of cybersecurity incidents and drive security operations maturity.

Responsibilities

• Manage and resolve escalations originating from the Security Operations Center.
• Direct significant incidents, managing cyber-crisis communications to leadership.
• Manage and direct sensitive investigations and overall visibility concerns for gap resolution.
• Develop and maintain incident response processes and coordinate cyber training events (Red/Blue/Purple).
• Continuously evaluate and propose new technology and approaches to enhance detection and response capabilities.

Required Skills

• 3+ years of experience with SIEM platforms, including query writing, data modeling, and saved searches.
• 3+ years of experience with EDR and AV platforms, including containment and memory analysis.
• 3+ years of experience with Firewall and IDS/IPS platforms, including traffic and pcap analysis.
• 1+ years of experience with Forensics platforms, including disk imaging, image, and memory analysis.
• 1+ years of experience managing cyber events, covering response, containment, and eradication.
• Experience writing After-Action/Lessons Learned reports and communicating remediation actions to leadership.
• Deep understanding of access controls, authentication methodologies, and directory services (Active Directory, Azure AD, GPO, Linux rights).
• Knowledge of Cloud Services architecture and associated security methodologies.
• Skilled in leading small to medium-size IT and Cybersecurity projects.

Preferred Skills

None specified.

Key Skills

Education

Any Graduate