Manager, Sr. Security Operations Engineer

Title:

Manager, Sr. Security Operations Engineer

Company:

Everest Global Services, Inc.

Job Category:

Technology

Job Description:

About Everest:

Everest Group, a NYSE listed S&P 500, is a leading global reinsurance and insurance provider, operating for nearly 50 years, now in over 15 countries. Everest is a growth company offering Property, Casualty and Specialty products. We have extensive product and distribution capabilities backed by a strong balance sheet which is evident in our Financial Agency Ratings of: A+ A. M. Best, A+ S&P Global and A1 Moody’s Investor Service.

We take pride in being known in the industry as nimble, entrepreneurial, and responsive. Our culture is innovative, we empower our employees to make business decisions within our risk framework at a local level.  

At Everest, we are committed to the development of our people. We offer dynamic training & professional development to our employees. You will benefit from career development and learning opportunities that will let you set career goals and fulfill them, including:

•          Generous tuition/continuing education reimbursement

•          Mentoring opportunities

•          Flexible work arrangements

•          Talent development initiatives

•          Networking groups

Job Summary:

As a Senior Security Operations Engineer within our Security Operations Center (SOC), you will play a critical role in safeguarding our organization's IT infrastructure, applications, and users. You will lead advanced incident response efforts, conduct thorough compromise assessments, and perform root cause analysis to address and mitigate security threats. Your expertise will drive proactive threat hunting initiatives based on intelligence alerts and contribute to the effectiveness of our cybersecurity posture.

You will also design and oversee red team exercises to test and validate security tools and processes. Additionally, you will create and maintain comprehensive standard operating procedures and runbooks for new alerts and tools. Your role will involve establishing and managing continuous control testing to ensure our cybersecurity controls remain robust and effective. Your contributions will be crucial in maintaining the integrity and security of our systems and data.

Responsibilities include but not limited to:

• Support the SOC team with advanced incident response as needed, including conducting compromise assessments and root cause analysis.
• Enhance existing security tool capabilities by performing assessments and gap analysis.
• Conduct proactive threat hunting based on intelligence alerts.
• Create standard operating procedures and runbooks for all new alerts and tools.
• Implement and manage ongoing control testing for cybersecurity measures.
• Lead the incident response efforts, ensuring timely detection, analysis, and containment of security incidents.
• Oversee the management and optimization of Microsoft Security Suite tools (such as Microsoft Defender ATP, Azure Sentinel, and Microsoft Cloud App Security).
• Develop and implement security measures, policies, and procedures to protect systems and networks against unauthorized access, data breaches, and other security incidents.
• Investigate security incidents, analyze patterns, and recommend proactive measures.
• Assist in onboarding a new third-party SOC provider, contributing to the development and documentation of security processes and procedures in alignment with best practices and compliance standards.
• Operationalize actionable threat intelligence reports from internal and external sources.
• Actively plan Red Teaming along with remediation responsibilities
• Collaborate with cross-functional teams to develop and implement effective incident response plans.

Qualifications, Education & Experience:

• Certifications: CISSP, CEH, or similar industry-recognized certifications preferred.
• Cloud Experience: Proficiency in cloud platforms such as Azure, AWS, or Google Cloud.
• 4+ years in a Security Operations Center (SOC) or related IT role.
• Technical Skills: Demonstrated experience with Linux operating systems.

Knowledge, Skills & Competencies:  

• Familiarity with Microsoft Security Suite tools (Microsoft Defender ATP, Azure Sentinel, etc.)
• Understanding of security information and event management (SIEM) systems
• Knowledge of threat intelligence platforms and threat hunting techniques
• Strong Linux/UNIX experience
• Experience in security operations, incident response, or rela