Security Operations Lead

Role & responsibilities

1. Ensure optimal operation of MDR solution, including software and applications.

2. Ensure effectiveness of security solutions in scope

3. Develop use cases and playbooks for SIEM and SOAR for effective and automated incident detection and handing.

4. Test SIEM SOAR and other solutions in scope to explore the right technical defense/remedy and provide performance statistics and reports.

5. Ensure adequate controls are in place to protect critical assets against any incidents or threats from the internal or external environment.

6. Co-ordinate with vendors/partners & internal teams to manage the lifecycle of security platforms including deployments, maintenance and operations. Develop plans for maintaining the infrastructure in newly implemented security solutions to operational environment.

7. Lead Cybersecurity incident management and manage related process, tools and resources 8. Work with identified partner and govern them for effective execution of organizational requirements for Security operations and incident handling

9. Conduct periodic threat hunting independently and with partners to ensure effective detection of any threats.

10. Ensure preventive maintenance of critical infrastructure, to increase performance and minimize disruption.

11. Manage SLAs for solutions and processes in scope.

12. Record all incidents/events leading to infrastructure downtime, analyze root cause and suggest workarounds.

13. Monitor performance reviews, corrective action, routine equipment checks and preventative maintenance for security systems to reduce the down time of the systems.

14. Perform integration of all tools and services for access, authentication, authorization, data security, vulnerability management, policy management, auditing, and compliance to ensure company's security policy and procedures are applied.

15.Define, gather and report on metric regarding security systems within ASL environments. Prepare status reports and other management metrics as needed.

Preferred candidate profile

1. Demonstrable experience within a Security Operations Center, coordinating responses to security incidents.

2. Experience leading the implementation and development of MDR tooling, infrastructure and processes

3. Experience On popular SIEM, SOAR, and threat hunting platforms is mandatory.

4. Experience in security incident handling is mandatory.

5. Exposure to threat hunting is mandatory.

6. Security related professional certifications preferred. Examples of certifications include but are not limited to CISSP, CIH (ec council), CND, infosec institute, etc.

7. Strong analytical & problem-solving skills with ability to translate ideas into practical implementation.

8. Ability to manage stakeholder relationships including team members, vendors and partners. 9. Excellent leadership and communication skills with ability to present and communicate effectively with both technical and non-technical audience.

10. Ability to provide technical and professional leadership, guidance, and training to others.