We are seeking a highly experienced Cybersecurity Security Operations Center (SOC) Lead to join our team. The SOC Lead will be responsible for leading and managing the day-to-day operations and ensuring the organization's security posture is maintained.
Key Responsibilities:
- Leading a team of ITHRA SOC analysts and engineers in the detection, investigation, and response to security incidents
- Lead and develop a well-trained ITHRA SOC Team with core competencies necessary to detect, investigate, response, manage risk, stay ahead of security threats or position team to effectively mitigate risk
- Monitoring, analyzing, and detecting security events and incidents
- Analyze and evaluate network, system, and security alerts performing triage to include determining scope, urgency and potential impact, identifying the specific vulnerability
- Actively participate in decision making with leadership and seek to understand the broader impact of current decisions
- Developing, implementing, and maintaining security policies, procedures, and standards
- Overseeing the use of security tools and technologies, including SIEM, IDS/IPS, and firewalls
- Collaborating with other teams to develop and implement incident response plans
- Communicating with senior management and stakeholders regarding security incidents and remediation efforts
- Keeping abreast of new security threats and technologies and incorporating them into the organization's security posture
- Establish and maintain training plans and conduct ongoing training of ITHRA SOC staff
- Providing guidance and mentorship to the ITHRA SOC team members
Requirements
- Bachelor's degree in Computer Science, Cybersecurity or a related field
- Certification by one of these organizations (SANS, Offensive Security, eLearn Security)
- Minimum of 5 years of experience in the information security field, SOC lead or management role
- Well versed with Security operations, Intrusion detection and incident handling
- Security monitoring experience with one or more SIEM technologies
- Knowledge of current and emerging technologies and processes used within a SOC to improve efficiency and effectiveness
- Strong communication, writing and interpersonal skills. Strong leadership skills with the ability with the ability to prioritize and execute in a methodical and disciplined manner, as well as to set and manage expectations with stakeholders and team members
- Strong understanding of security threats and technologies
- Experience with network and host-based security tools
- Experience with incident response procedures and regulations
- Strong analytical and problem-solving skills
- Strong communication and leadership skills
- Strong leadership and team management skills
