Manager, Security Operations

ABOUT THIS POSITION

The Manager of Security Operations and Engineering manages the Security Operations, Vulnerability Management and Security Engineering teams/processes.

The Security Operations team is responsible for conducting 24x7 monitoring and response. They will evaluate threats to the environment and will deploy/record the activities of the Security Incident Response Team. They are responsible for maintaining the operation of the SIEM tool, ensuring proper training for SIRT. Develop metrics around the incident response process and report statuses to management.

The Vulnerability Management team is responsible for conducting and reporting on vulnerability scans to detect vulnerabilities in the environment. They will coordinate remediation by the appropriate infrastructure team. Develop metrics around vulnerability management and report status to management.

The Security Engineering team is responsible for monitoring and reporting on the implementation of security controls into the infrastructure. Primarily they monitor system configurations and settings to ensure compliance requirements and security operational needs are met. Develop metrics around infrastructure security controls and report status to management. They will research security best practices for new technology. They will work with other teams to establish sound secure architecture in both cloud and traditional environments. They will partner with and provide guidance for other department teams to further improve our overall security posture.

WHAT YOU'LL DO

Duties: 

• Manage the Security Operations team. 

• Ensure appropriate training for SIRT members. 

• Manage the Vulnerability Management team. 

• Manage the Security Engineering team. 

• Design and establish security processes for on-premise infrastructure. 

• Develop security roadmaps for security functionality to be implemented by infrastructure  and application development teams. 

• Lead the selection of security tools. Design implementation and operational processes. 

• Evangelize security. Mentor teams for security best practices. 

• Prioritize and manage complex Security or Technology projects and tasks 

• Other duties as required 

WHAT YOU'LL NEED

Because this is a working Manager position, the candidate must be able to fulfill all the requirements of a Security Engineer. In addition, the candidate must: 

• Have a minimum of 10 years’ experience as a security architect or security engineer 

• Have a minimum of 15 years’ experience in technology 

• Have a strong knowledge of security operations, vulnerability management, and security engineering disciplines 

• Have a strong knowledge of Systems and Network Administration 

• Have worked on complex projects within a corporate or government environment 

• Have worked in a regulated environment, specifically within the Financial or Healthcare 

sectors 

• Bachelor’s degree in related field or equivalent work experience 

Preferred Skills: 

• Certification or an advanced degree in IT or Security disciplines 

• Knowledge of Security tools, such as vulnerability scanners, application scanners, SIEM, FIM, IDS/IPS, & AV, etc. 

• Experience in Azure, AWS and/or Google Cloud environments 

• Experience in researching security best practices 

• Experience in designing security architecture & systems<