Manager, Cyber Response Operations

Company Description

We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.

Here you can be your authentic self. As a company uniquely positioned to educate, entertain and empower through our platforms, Comcast NBCUniversal stands for including everyone. Our Diversity, Equity and Inclusion initiatives, coupled with our Corporate Social Responsibility work, is informed by our employees, audiences, park guests and the communities in which we live. We strive to foster a diverse, equitable and inclusive culture where our employees feel supported, embraced and heard. Together, we’ll continue to create and deliver content that reflects the current and ever-changing face of the world.

Job Description

NBCUniversal’s Cyber Threat Operations team is responsible for providing cyber threat intelligence, event monitoring, incident response, and threat hunting for all areas of NBCUniversal in a highly collaborative, fast paced, and agile fashion. The Manger of Cyber Response Operation’s primary function is to lead a team of cybersecurity event analysts and incident responders to provide continuous monitoring, event triage and analysis, incident response, remediation support and forensic services. This role also provides professional security operations center (SOC) analysis.  The Cyber Response Operations is the designated 24x7x365 first line of defense against cyber threats at NBCUniversal.

The team is made up of Event analysts and Incident Responders who follow an Incident Response Plan to navigate the phases of Cyber Event and Incident Response. This team is critical to identifying and responding to adversarial attacks quickly and effectively. The leader of this group must be able to adapt quickly, solution on the fly and implement rigor that drives consistency and maturity, as well as enable the team to operate with creativity and empowerment. This role will require dedicated time to each employee to assist in their technical and professional development.

Duties and Responsibilities

• Manage 24/7/365 Security Operations team personnel and day-to-day SOC operations
• Monitor, respond, and manage cyber security events across the NBCU enterprise estate.
• Function as Incident Handler/Commander to remediate active incidents in coordination with the impacted business
• Managerial escalation point for potential cyber incidents or required assistance from Response team
• Participate in manager on-call rotation for cyber incident escalations and handling
• Ensure proper event identification, triage, threat determination, documentation & reporting across analysts
• Maintain and enforce event/ticket standards, key performance indicators and process adherence
• Manage team resources to support business & operational needs (shift coverage, Pillar Lead Program, escalations)
• Prioritize and drive automation priorities and team process enhancements
• Maintain relationships with Information Security Officers, business stakeholders, and other IT security teams
• Process documentation creation, maturity, and management
• Provide mentoring for SOC personnel for technical, professional, and career growth
• Develop and execute strategic plans that align to delivery of Senior Leadership goals and objectives
• Create and deliver monthly metrics that displays operational effectiveness, risk reduction, and business impact
• Effectively communicate status on operations, incidents, and concerns to business VIPs and Senior Leadership

Qualifications

Basic Requirements

• Bachelor’s Degree in an IT related field and/or equivalent work experience
• 5+ years of Cyber Security experience with a minimum of 4 years in Incident Response, Security Operations Center (SOC), or similar functions.
• 2+ years of experience managing a mature SOC.
• In-depth understanding of cyber threats, adversary techniques, response procedures, network and enterprise architecture, and threat detection.
• Willingness to work in a fast paced, high demand role that will require nonstandard working hours