Secops Manager Role.

Job Description Security Operations Manager

The incumbent in this role applies advanced expertise for managing teams of security operations, Software, and Infrastructure by mitigating complex business/ technical issues within established working performance standards. Manages team of individual contributors and/or Technical leads providing subject matter expertise to functional project teams to deliver superior client satisfaction. Plans, manages and monitors operational/tactical activities of team for ensuring building and sustenance of a robust SOC. Acts as people manager for SecOps team for its deliverables; by advising enhancements to teams, by encouraging innovative methods adaption to prevent security vulnerabilities in diverse complexity scenarios. Provides support and supervisory guidance to the team. This role requires the incumbent to independently manage the SOC environment ensuring effective and well-planned Network down-time management to build robust network infrastructure and security. The role entails guiding teams on the nature of the domain and providing domain insights related to the day to day work of the security operations team and adapting best practices of industry for current and future needs.

Competencies:

• Applies mastery and recognized authority on relevant subject matter knowledge including technologies, theories and techniques to manage, monitor and improve team activities in solving common and complex business critical deliverables issue.
• Identifies leverage opportunities where team can provide cost-effective, efficient, standard solutions to meet the needs of multiple business/function/geography organizations.
• Actively participates in various projects within team and across functions to ensure that business, function, and geography customers” are included appropriately and ensures that they receive sufficient and timely communications.
• Uses and applies extensive business knowledge at domain level to drive engagement for the largest IT initiatives. Proactively engages in team planning and risk mitigation to enable team for future impacts;influences overall plan and execution for effective deliverance of team.
• Solve complex business network issues by recommending solutions and advising to team to build their capabilities for effective service/incident resolution.
• Monitors team’s work, guides and owns the implementation of best approach for ensuring superior performance standards and client delivery consistency for process stabilization.
• Possess and demonstrates excellent planning and prioritization skills.
• Encourages and develops team by providing support and guidance for technical and process related advices to team members to provide effective and timely service resolution before escalation
• Inculcates the feedback garnering from clients and auctioning accordingly, including advising subordinates to analyse problems and experiment with methods for arriving at best approaches.
• Frequently represents the organization to external customers/clients. Exercises significant independent judgment and decision-making within broadly defined policies and practices to determine best method for accomplishing work and achieving objectives.
• Exceptional communication skills (both verbal and written) and interpersonal skills to collaborate well and manage teams across teams, different groups and geographies seamlessly.
• Collaborates highly with cross-functional teams to mitigate critical risks and ensuring a healthy operating environment where solution alternative can be brainstormed.
• Promotes best practices found in working with one business/function/geography to other business and function organizations.

Technical Skills:

• 10 to 13 years in Security Operations work experience in a complex business environment.
• Experience in leading team consisting of team members from various back grounds
• Experience in dealing with global SOC teams
• Operational experience in Security Managements tools and applications –
• Intrusion Prevention System: Sourcefire,
• AV: Symantec, Windows Defender, Vulnerability Assessment via Qualys and Veracode,
• SIEM: ArcSight/Splunk, Threat Detection via Vectra, Ticketing/ Change Management via ServiceNow, FireMon, etc
• Other tools - AV and Malware analysis tools, Opensource Scanning tools, reporting tools, threat intelligence feeds, others
• Good knowledge of cryptography, application security, access control, malware, exploits and vulnerabilities
• Internet security, networking protocols, and related technologies, including IDS/IPS, firewalls such as Cisco, PaloAlto, etc, content filtering, and packet inspection
• In-depth technical knowledge and experience in cyber security threats, security controls, investigation, hardening and best practices
• Working knowledge of Active Directory, LDAP, Kerberos and various hashing algorithms
• Working knowledge with authentication repositories and directories
• Knowledge on Microsoft Defender Advanced Threat Protection (ATP) for endpoint security
• Knowledge of Artificial Intelligence in Cyber Security
• Strong engineering experience with exposure to multiple security tools

Educational Qualification and Experience:

• Minimum of 15 years of formal education - Graduate / Postgraduate in Computer Science / Information Technology.
• Professional work experience between 10-15 and at least 6-8 years as a Lead / Team Lead for security operations.

License or Certification

• CISSP, CISP, CEH, CCNA, Splunk / CRIBL, OSCP preferred.