Description

You will manage the lifecycle of cybersecurity incidents and drive security operations maturity.

Responsibilities

• Manage and resolve escalations originating from the Security Operations Center.
• Direct significant incidents and manage cyber-crisis communications to leadership.
• Conduct sensitive investigations and oversee gap resolution for visibility concerns.
• Develop incident response processes and coordinate cyber training events (Red/Blue/Purple).
• Evaluate and propose new technologies to enhance detection and response capabilities.

Required Skills

• 3+ years with SIEM platforms, including query writing, data modeling, and saved searches.
• 3+ years with EDR and AV platforms, including containment and memory analysis.
• 3+ years with Firewall and IDS/IPS platforms, including traffic and pcap analysis.
• 1+ years with Forensics platforms, including disk imaging and memory analysis.
• 1+ years managing cyber events, covering response, containment, and eradication.
• Experience writing After-Action/Lessons Learned reports and communicating remediation to leadership.
• Deep understanding of access controls, authentication, and directory services (Active Directory, Azure AD, GPO, Linux rights).
• Knowledge of Cloud Services architecture and associated security methodologies.

Preferred Skills

• Skilled in leading small to medium-size IT and Cybersecurity projects.

Key Skills

Education

Any Graduate