Supervisor, Security Operations

Job Description:

The Supervisor, Security Operations is responsible for leading and managing a team of Security Operations Analysts. This role requires strong leadership, technical expertise, and a deep understanding of security operations best practices. The Supervisor will oversee day-to-day functioning of the Security Operations team, including incident response, threat hunting, security monitoring, and vulnerability management.

Key Responsibilities and Essential Job Functions:

Team Leadership & Management:

• Lead, mentor, and develop a high-performing team of Security Operations Analysts.
• Conduct performance reviews, provide constructive feedback, and identify opportunities for professional growth within the team.
• Recruit, interview, and onboard new team members.
• Set and measure clear goals, objectives, and performance expectations for the team.
• Motivate and inspire the team to achieve operational excellence.
• Foster a positive, collaborative, cross-functional team environment.

Security Operations Oversight:

• Oversee day-to-day operations of the Security Operations Center (SOC), ensuring efficient and effective monitoring and response to security events.
• Develop and implement SOPs, playbooks, and runbooks for security incident response and other security operations activities with a focus on automation.
• Monitor and analyze security alerts, investigate security incidents, and coordinate response activities.
• Lead incident response investigations, including containment, eradication, and recovery efforts.
• Conduct root cause analysis of security incidents and implement corrective actions to prevent future occurrences.
• Evaluate performance of security operations vendors.

Threat Hunting & Intelligence:

• Lead threat hunting activities to proactively identify and mitigate emerging threats.
• Stay informed about the latest security threats and vulnerabilities through threat intelligence feeds, industry publications, and other sources.
• Analyze security intelligence and incorporate relevant threat information into security operations processes.

Vulnerability Management:

• Oversee vulnerability management operations with key internal stakeholders, including vulnerability scanning, assessment, and remediation.
• Lead the development and implementation of vulnerability management operational policies and procedures.

Security Tooling & Technology:

• Collaborate in evaluation and selection of security tools and technologies to enhance the effectiveness of the Security Operations Center.
• Maintain operational oversight of security operations tools and technologies, including SIEM, XDR, SOAR, and endpoint detection and response systems.

Compliance & Reporting:

• Ensure compliance with relevant security regulations and industry standards (e.g., PCI-DSS, ISO 27001, NIST Cybersecurity Framework).
• Generate reports on security operations activities, including incident response metrics, threat intelligence, and vulnerability management findings.
• Participate in security audits and assessments.
• Participate in security on-call rotation.
• Perform other duties as required and assigned. 

Required Qualifications:    

• Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or a closely related field, or equivalent experience.
• 4+ years of experience in information security, with at least 3 years of experience in security operations.
• 1+ years of experience managing and leading a team of security analysts.
• Strong understanding of security operations principles, methodologies, and best practices.
• Experience with scripting languages (e.g., Python, PowerShell, YARA-L).
• Experience with security information and event management (SIEM) systems and other security operations tools.
• Strong understanding of network security, incident response, threat hunting, and vulnerability management.
• Excellent communication, interpersonal, and presentation skills.
• Strong analytical, problem-solving, and decision-making skills.
• Ability to work independently and as part of a team.

Preferred Qualifications:

• 6+ years of security operations, incident response, or equivalent experience
• Master’s degree in Computer Science, Information Security, or a related field.
• Relevant security certifications (e.g., CISSP, CISM, CISA, GCIH, GCIA).
• Experience with cloud security and cloud-based security operations.

Physical Requirements: