Principal of Security Operations

Business Wire, a Berkshire Hathaway company, is the global market leader in press release distribution and regulatory disclosure. We are on a mission to redefine how organizations connect with their audiences - and that’s just the beginning!
Organizations, large and small, depend on us to accurately publicize market-moving news and multimedia, and generate social engagements that develop interactions with their target audiences.
About the RoleBusiness Wire is committed to delivering secure and reliable software solutions to our internal stakeholders and external customers. We are looking for a talented Principal of Security Operations to join our team and drive our Security Operation, Detection & Response initiatives to new heights. As the Principal of Security Operations, you will be a key leader responsible for overseeing and advancing our security operations function. You will play a critical role in safeguarding our systems, data, and reputation by implementing and optimizing various security technologies and processes.  You will enhance the security resilience of Business Wire, working closely with various teams to proactively protect our valuable assets and uphold our commitment to providing secure and reliable services to our clients.

What You'll Do

• Security Operations Leadership: Provide mentorship, direction, and guidance to enhance our security capabilities associated with monitoring, detection, and response.
• Detection & Response Platform Management: Oversee the management and optimization of our Security Information and Event Management (SIEM) platform to ensure timely detection and response to security incidents.
• Security Automation: Build security automation playbooks leveraging the SOAR platform to improve the detection & response capabilities of the team.
• Endpoint Protection: Implement and manage Endpoint Detection and Response (EDR) solutions to protect our endpoints from advanced threats and intrusions.
• Monitoring and Analysis: Establish and maintain a robust monitoring and analysis program to identify and respond to security events in real-time.
• Threat Intelligence: Operationalize the threat intelligence program by collaborating on the ingestion and correlation of threat intelligence feeds with the Business Wire threat defense tools.
• Investigation and Forensics: Conduct thorough investigations into security incidents, analyzing root causes, performing host and network forensics, and providing remediation recommendations.
• Threat Hunting: Proactively search for and identify potential security threats and vulnerabilities, staying ahead of emerging attack vectors.
• Incident Management: Lead incident response efforts, coordinating with internal and external stakeholders to effectively contain and mitigate security incidents.
• Cloud Detection & Response: Lead and manage security incidents and response procedures within AWS environments, utilizing native AWS security tools effectively.
• Defensive Tools Management: Oversee and optimize security defensive technologies, including DLP, CASB, Crowdstrike EDR, Microsoft Defender, Wiz, and others to mitigate potential threats.
• AWS Security Best Practices: Implement and maintain security controls in AWS environments, adhering to industry best practices and ensuring compliance with security standards.

What You'll Need

• Extensive Security Operations Experience: 8+ years of hands-on and leadership experience in security operations, incident management, and threat hunting, with 4+ years in an AWS environment.
• Strong Technical Background: Deep understanding of security technologies and tools including SIEM, EDR, threat intelligence platforms, and other security monitoring and detection solutions.
• Scripting Experience: Demonstrated knowledge of common scripting languages (Python, PowerShell, Bash, etc.).
• Cloud Security Expertise: Proven experience in managing security investigations and implementing security best practices within AWS environments.
• Incident Response Expertise: Demonstrated expertise in leading and managing incident response efforts, with a strong understanding of incident handling best practices. Extensive experience in handling and leading complex incident response activities across a dynamic technical ecosystem.
• Preventive Capabilities Expertise: Demonstrated knowledge of preventive security technologies such as DLP, CASB, Crowdstrike XDR, Microsoft Defender, and their integration into security operations.
• Leadership and Collaboration: Proven leadership skills with the ability to inspire and motivate a team, collaborate with cross-functional stakeholders, and drive positive change.
• Communic