SOC Operations Manager I

The Security Operations Manager over Advanced Fusion Center (AFC) team is responsible to ensure appropriate oversight As a technical management role, the ideal candidate possesses deep security knowledge/expertise, previous experience as a security practitioner, systems management and administration experience, proven service management skills, and the ability to attract and retain talent in a challenging market. The position is closely involved in helping to mentor, develop and evaluate employee performance as well as helping with the development and continuous improvement of the Security Operations services to our clients.

How you’ll make an impact

• Lead and manage Security Operations Center

• Primarily responsible for security event monitoring, management and response

• Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoring.

• Ensure compliance to SLA, process adherence and process improvisation to achieve operational objectives.

• Revise and develop processes to strengthen the current Security Operations Framework

• Review policies and highlight the challenges in managing SLAs.

• Regularly review standard operating procedures and protocols to ensure SOC continues to effectively meet operational requirements.

• Responsible for team & vendor management, overall use of resources and initiation of corrective action where required for Security Operations Center

• Perform threat management, threat modeling, identify threat vectors and develop use cases for security monitoring.

• Creation of reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt.

• Routinely engage with cross functional teams to evaluate SOCs ability to meet stakeholder needs.

• Evaluate existing technical capabilities and systems and identify opportunities for improvement.

• Oversee training and exercises to ensure SOC team proficiency, conduct after action reviews to identify lessons learned and best practices.

• Work closely Security Leadership to identify implement process changes, improvements and efficiencies and ensure solid security practices.

• Develop communication channels with technology owners and the business to evangelize the evolving threat landscape.

What we’re looking for

• Bachelor of Science degree in Computer Science or related field is required.

• Minimum 10+ years security incident response experience.

• Excellent analytical thinking and problem solving skills.

• Must have excellent written, communication and verbal skills to assist with communications with other teams and writing executive summaries based on work output.

• He or She must have strong leadership experience in a high paced complex IT environment. Ability to lead, influence and collaborate with remote team members, proven delivery, remediation and incident response background.

• Should have advanced knowledge of enterprise environments consisting of Windows and Macintosh operating systems, embedded systems, networking devices and Linux/UNIX

• Requires operational knowledge of firewalls, routers, switches, messaging systems, various commonly used operating systems (Windows, Linux, etc.), common attack tools, and vulnerability detection/management tools. Strong background in security incident response, vulnerability management, system operations and application operations a plus.

• Self-managed and team oriented.

• Deadline and detail oriented, Highly motivated

• SOC/Cyber Operation Manager role is a complete hands-on role where somebody having experience towards any of the SIEM tool along with that having experience maintaining the team of SOAR Engineers, SIEM Engineers and SOC Analysts.

• 4-7 years experience in service delivery management required

• 4-7 years Project Management experience required

• 4-7 years Information Technology experience required

• CompTIA Security+ Certification One or more certifications in Security/Networking Upon Hire preferred

• CISSP Certified Information Systems Security Professional One or more certifications in Security/Networking Upon Hire preferred

• GSEC Upon Hire preferred

• GCIA Upon Hire preferred

• GCIH Upon Hire preferred

• Certified Project Management Professional (PMP)-PMI Upon Hire preferred

• The role demands the availability for US working hours.

• This role is Work from Office role.

What you can expect from Optiv

• A company committed to championing Diversity, Equality, and Inclusion through our Employee Resource Groups.
• Work/life balance
• Professional training resources
• Creative problem-solving and the ability to tackle unique, complex projects
• Volunteer Opportunities. “Optiv Chips In” encourages employees to volunteer and engage with their teams and communities.
• The ability and technology necessary to productively work remotely/from home (where applicable)

EEO Statement

Optiv is an equal opportunity employer. All qualified applicants for employment will be considered without regard to race, color, religion, sex, gender identity or expression, sexual orientation, pregnancy, age 40 and over, marital status, genetic information, national origin, status as an individual with a disability, military or veteran status, or any other basis protected by federal, state, or local law.

Optiv respects your privacy. By providing your information through this page or applying for a job at Optiv, you acknowledge that Optiv will collect, use, and process your information, which may include personal information and sensitive personal information, in connection with Optiv’s selection and recruitment activities.  For additional details on how Optiv uses and protects your personal information in the application process, click here to view our Applicant Privacy Notice. If you sign up to receive notifications of job postings, you may unsubscribe at any time.