Manager SOC Security Intelligence & Threat Hunting

<h3>Company Description</h3><p>Eurofins Scientific is an international life sciences company, providing a unique range of analytical testing services to clients across multiple industries, to make life and our environment safer, healthier and more sustainable. From the food you eat, to the water you drink, to the medicines you rely on, Eurofins laboratories work with the biggest companies in the world to ensure the products they supply are safe, their ingredients are authentic, and labelling is accurate.</p><p>Eurofins is dedicated to delivering testing services that contribute to the health and safety of society and the planet, and to its corporate responsibility to protect the environment and ensure diversity, equity, and inclusion across the entire network of Eurofins companies.</p><h3>Job Description</h3><p>As a leader of the Security Intelligence &amp; Threat Hunting functions, you will be hunting, assessing, and mitigating threats to Eurofins. You will be responsible for leading a team and guiding them through tracking targeted campaigns and threat actors; analysing intrusions and exploitation of data gathered through incident response; and discovering our threat surface. You will analyse and translate threats to Eurofins’ infrastructure and working with Security Intelligence information to improve the overall security posture of the network. Your in-depth knowledge will help to enhance Eurofins’ detection capabilities, which are tested by your offensive security team members. You will also oversee and guide Eurofins Threat Hunters through deep dives into the available security monitoring tools, to proactively look for emerging threats to Eurofins. Additionally, as an Security Operation Center Manager, you will be responsible for improving the SOC and the overall security maturity of the organisation.</p><p><strong>Specific Assignments:</strong></p><p>The main responsibilities of the Manager SOC Security Intelligence &amp; Threat Hunting are leading the process development for ingestion, processing Open-Source information, and translating threats to Eurofins.</p><p>You will work with the Threat Intelligence Platform to document findings and track the analysis of incident data and participate in activities aiming to improve the security posture of Eurofins.</p><p>This role requires you to work closely with Information Security teams, Project Managers, business representatives and vendors to address product development requirements. You will assist on multiple policies defining security measures and handle technical issues/risks and participate in incident handling activities.</p><p>Scope of the duties includes developing KPIs and leading improvement efforts to enhance the detection engineering capabilities of the team. A crucial part of this position is to conduct offensive security testing to identify gaps in the detection logic, investigate and assess current vulnerabilities, and draft advisories for Eurofins, while continuously improving our security posture.</p><h3>Qualifications</h3><p>You need to have<u> 5 years </u>of consulting or enterprise professional experience as an IT Security Manager or Senior Information Security Consultant, ideally with experience in Security Intelligence and Threat Hunting.</p><p>You should have experience in using security monitoring tools (and beyond) in order to find threats, outside of regular reactive patterns, and analysing large data sets.</p><p>We are looking for someone who has experience in working with MISP and Security Intelligence solutions, industrial taxonomies like Cyber Kill Chain, MiTRE’s ATT&amp;CK, STIX 2.0, and Diamond Model. This role requires the ability to produce contextual attack models applied to a scenario and to demonstrate intrusion sets using Cyber Kill Chain and Tactics, Techniques and Procedures. You need to have experience with Threat Modelling exercises and developing Intelligence requirements and metrics.</p><p>Experience in writing automation scripts (PowerShell, Python or other) and relevant Technical Security Certifications (GIAC, CISSP, Offensive Security, etc.) is appreciated.</p><p><strong>Personal profile</strong></p><p>If you have good interpersonal relation skills at all levels of the organisation, experience in leading a team and the ability to work in a complex international environment, we want to hear from you. We are looking for someone who has good time-management skills and is eager to learn and continuously develop their personal and technical capabilities.</p><h3>Additional Information</h3><p><strong>We support your development! </strong>Do you feel you don’t match 100% of the requirements? Don’t hesitate to apply anyway! Eurofins companies are committed to supporting your career development.</p><p><strong>We embrace diversity!</strong> Eurofins network of companies believe in strength and innovation through diversity, being an <u>Equal Opportunity Employer</u>. We prohibit discrimination against employees or appli