Cybersecurity Manager

Salary Range $119,000 - $155,000*

Job Description:

Who We Are:

Saks is a world-renowned luxury ecommerce destination. The company’s unique approach combines a focus on the digital customer experience with a strong connection to a network of extraordinary stores that extends that seamless experience into the real world. 

On its website and app, Saks offers an unparalleled selection of curated merchandise across fashion for women and men, beauty, jewelry, home décor and more. In addition to the shopping experience, customers come to Saks for inspiring editorial content, access to digital stylists, lifestyle experiences and other world-class services.

Role Summary:

A highly motivated Cybersecurity Manager within the Cyber Security Operations Center (CSOC) with expertise in Security Information and Event Management (SIEM), particularly Sumo Logic. This role involves monitoring, analyzing, and responding to security threats and incidents, while also managing partnerships with Managed Detection and Response (MDR) partners. The goal is to ensure alignment with our security objectives, service level agreements (SLAs), and compliance requirements.

Role Description:

Leadership and Mentoring:

• Lead and mentor a team of security analysts, providing guidance and support.

• Define and implement processes for collaboration between in-house CSOC teams and MDR.

• Prepare and present regular reports on security incidents, trends, and performance metrics.

• Provide recommendations for improvements based on analysis of security incidents and trends.

• Lead training sessions and workshops to enhance the skill set of the team.

• Act as a subject matter expert (SME) on security incidents and SIEM best practices.

Collaborate with Managed Detection and Response providers

• Oversee and manage relationships with Managed Detection and Response Providers (MDRs) to ensure they effectively deliver the agreed-upon services.

• Monitor MDR activities to ensure compliance with Service Level Agreements (SLAs) and contractual obligations.

• Evaluate reports, alerts, and threat intelligence provided by MDRs for accuracy and relevance.

• Serve as the primary point of contact for MDRs, ensuring clear communication of organizational priorities and requirements.

• Regularly review MDR performance metrics and conduct quarterly business reviews (QBRs).

Incident Investigation and Response:

• Lead the investigation of complex security incidents, including data breaches, malware infections, and unauthorized access.

• Perform detailed forensic analysis of compromised systems and networks.

• Coordinate incident response efforts with cross-functional teams to contain and mitigate threats.

• Document and report on security incidents, findings, and recommendations.

Threat Intelligence and Analysis:

• Gather, analyze, and disseminate threat intelligence from multiple sources (e.g., open-source, commercial feeds, ISACs).

• Utilize threat intelligence to identify and prioritize potential threats to the organization.

• Conduct threat hunting activities to proactively identify security risks and vulnerabilities.

• Collaborate with threat intelligence partners and communities to stay updated on the latest threats and trends

Key Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or related field. Advanced degree preferred.

• Minimum of 5-8 years of experience in a SOC or CSOC role with a focus on SIEM, incident response, SOAR, and threat intelligence.

• Professional certifications such as CISSP, CISM, GIAC (GCIH, GCIA, GCFA), CEH, or similar.

• Experience with cloud security platforms and technologies (AWS and Azure)

• Familiarity with scripting and programming languages (e.g., Python, PowerShell)

• Knowledge of Cloud IDP solutions (e.g. Sailpoint, Okta, Azure etc)

• Experience with large scale and complex incidents of all types to include APT, DDOS, ransomware, web/mobile compromise, account compromise, data disclosures, etc.

• Experience in network