Senior Manager, Security Operations Center

Senior Manager, Security Operations Center - Lead and Innovate at ORACLE NetSuite

Are you a seasoned security leader ready to take on an exciting challenge? We are on the hunt for a dynamic Senior Manager to spearhead the NetSuite Security Operations Center (SOC) and take it to new heights! This is your chance to make a significant impact on a global scale within the renowned ORACLE NetSuite Security team. This is a hybrid position requiring three days per week in office.

 

Your Mission:

As the Senior Manager, you will be the driving force behind the ORACLE NetSuite SOC, shaping its strategic direction and ensuring it remains at the forefront of security operations. Your primary focus will be to lead a talented team of engineers and set the stage for their success in monitoring, responding, and fortifying our SaaS security ecosystem including both cloud infrastructure and web applications.

 

What You'll Bring to the Table:

• Visionary Leadership: Ability to set a clear, inspiring vision for the SOC and translate it into actionable strategies
• Strategic Planning: Develop and execute long-term plans, encompassing hiring top talent, budgeting, and project management
• Team Mentorship: Mentor and guide a global team, fostering an environment of continuous learning and improvement
• Communication Excellence: Effectively convey complex security concepts to diverse audiences, from executives to engineers
• Critical Thinking: Approach security challenges with a sharp mind, identifying innovative solutions

Key Responsibilities:

• Strategic Leadership: Set the SOC's vision, aligning it with the organization's goals. Translate this vision into actionable plans, ensuring the team is equipped to monitor, detect, and respond to modern cyber threats.
• Team Management: Lead and mentor a diverse group of security engineers, fostering a collaborative and growth-oriented environment. Guide them in their mission to protect our SaaS infrastructure and applications.
• Security Program Design: Develop and implement a comprehensive security program tailored to the unique challenges of SaaS security, including credential abuse and carding attacks
• SaaS Security: Drive improvement to detection and response to automated threats against web applications
• Reporting and Transparency: Provide executive leadership with detailed reports, highlighting metrics, key performance indicators, and real-world case studies to demonstrate the SOC's value
• Case Management: Oversee incident response, ensuring efficient and effective handling of security events
• Stakeholder Collaboration: Work closely with various teams to integrate SOC insights into policy creation, user education, and training programs
• Process Optimization: Continuously improve monitoring and analysis processes, keeping up with the latest tools and methodologies to stay ahead of cybercriminals
• Standardization: Establish and document standard operating procedures, ensuring consistency and best practices
• Technology Assessment: Identify gaps in our security infrastructure and collaborate with stakeholders to enhance log management, monitoring, and analytical capabilities
• Adaptability: Stay agile and adapt operations to address new threats and industry trends
• Metrics and Measurement: Manage a metrics program to quantify the SOC's success and demonstrate its effectiveness
• Internal Collaboration: Foster relationships with internal teams to share knowledge and continuously improve the SOC's performance
• Talent Management: Attract, retain, and nurture top security talent, ensuring the SOC remains a hub of expertise

 

What We're Looking For:

• Experience: 7+ years of relevant work experience, with a bachelor's degree or 5 years with a master's degree. We seek leaders who have successfully managed global SOCs, especially in the SaaS or cloud security domain.
• Global Leadership: Demonstrated success in managing and inspiring remote teams across different time zones
• Security Expertise: In-depth knowledge of security monitoring, detection, and analysis tools (NIDS, EDR, WAF, etc.) and frameworks (kill chain, MITRE, NIST)
• Understanding of Web Application Security: Including automated threats such as cross-site scripting, carding attacks, and credential stuffing.
• Communication Skills: Exceptional written and verbal communication skills for conveying technical information to both technical and non-technical stakeholders
• Critical Thinking and Problem-Solving: Ability to tackle complex security challenges with creativity and logic

 

Preferred Qualifications:

• 8-12 years of experience in the field, with a strong background in SaaS, e-commerce, or cloud security, is highly advantag