Optiv - Manager - Cyber Operations

How You'll Make An Impact.

• Lead and manage Security Operations Center.
• Primarily responsible for security event monitoring, management and response.
• Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoring.
• Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives.
• Revise and develop processes to strengthen the current Security Operations Framework.
• Review policies and highlight the challenges in managing SLAs.
• Regularly review standard operating procedures and protocols to ensure SOC continues to effectively meet operational requirements.
• Responsible for team & vendor management, overall use of resources and initiation of corrective action where required for Security Operations Center.
• Perform threat management, threat modeling, identify threat vectors and develop use cases for security monitoring.
• Creation of reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt.
• Routinely engage with cross functional teams to evaluate SOCs ability to meet stakeholder needs.
• Evaluate existing technical capabilities and systems and identify opportunities for improvement.
• Oversee training and exercises to ensure SOC team proficiency, conduct after action reviews to identify lessons learned and best practices.
• Work closely Security Leadership to identify implement process changes, improvements and efficiencies and ensure solid security practices.
• Develop communication channels with technology owners and the business to evangelize the evolving threat landscape.

What We're Looking For :

• Bachelor of Science degree in Computer Science or related field is required.
• Minimum 10+ years security incident response experience.
• Excellent analytical thinking and problem solving skills.
• Must have excellent written, communication and verbal skills to assist with communications with other teams and writing executive summaries based on work output.
• He or She must have strong leadership experience in a high paced complex IT environment.
• Ability to lead, influence and collaborate with remote team members, proven delivery, remediation and incident response background.
• Should have advanced knowledge of enterprise environments consisting of Windows and Macintosh operating systems, embedded systems, networking devices and Linux / UNIX.
• Requires operational knowledge of firewalls, routers, switches, messaging systems, various commonly used operating systems (Windows, Linux, etc. ), common attack tools, and vulnerability detection / management tools.
• Strong background in security incident response, vulnerability management, system operations and application operations a plus.
• Self-managed and team oriented.
• Deadline and detail oriented.

Highly motivated.

The role demands the availability for US working hours (5 PM(IST) to 2 AM(IST)).

This role is Work from Office role.

SOC / Cyber Operation Manager role is a complete hands-on role where somebody having experience towards any of the SIEM tool along with that having experience maintaining the team of SOAR Engineers, SIEM Engineers and SOC Analysts.

(ref : iimjobs.com)