Leading Associate Vice President - Incident Response Engineering Manager

Your responsibilities :

• Lead SOC team and ensure adherence to quality standards and SLAs defined with regards to alerts handling activities
• Maintain 24x7 shifts ensuring service continuity and effective cooperation across all team members
• Ensure escalation to CERT with undue delay for all alerts potentially leading to incidents
• Identify and propose adjustments / improvements on SOC runbooks based for example on false positives, tuning of SIEM use cases and audit findings.
• Engagement with internal IT functions might be required to fill the identified gaps (e.g. lack of details in asset inventory) in the alert handling process.
• Identify and propose adjustments / improvements on SIEM UCs based for example on false positives reported by SOC and audit findings
• Quality check and end-to-end testing of SOC runbooks
• Preparation for audits (evidence / requests handling) and attendance
• Attendance to regular calls with SOC Service Manager
• Participating in Blue / Red teams exercise to test and improve our monitoring and response capabilities

Your profile :

Strong assets :