Technical Operations Manager

About Us :

Stefanini is a leading provider of cybersecurity solutions committed to protecting our clients from digital threats and ensuring the safety of their data. As our SOC Manager, you will be pivotal in leading our Security Operations Center and driving various specialized squads to enhance our security operations. You will be at the forefront of our security initiatives, safeguarding our clients' most valuable assettheir data.

Position Summary :

The SOC Manager will oversee the day-to-day operations of the Security Operations Center, ensuring effective monitoring, detection, and response to security incidents. This role includes managing a comprehensive suite of cybersecurity services, including Managed Detection and Response (MDR), SOC as a Service, CISO Advisory, SOC Advisory, Brand Protection & External Data Leakage, Attack Surface & Vulnerability Management, and Insider Threat Detection. The SOC Manager will also be responsible for SOC gamification and executing strategic squad lab research and development.

Key Responsibilities :

• Lead and Manage the SOC Team: Supervise and mentor a team of Tier-1 through Tier-3 Security Analysts and Engineers, providing guidance, training, and performance evaluations to ensure effective team management and leadership.
• Deployment and Oversight: Oversee the deployment, configuration, and delivery of core cybersecurity services, ensuring their effective integration and operation within the SOC.
• Incident Response: Manage the detection, investigation, and resolution of security incidents. Coordinate with other departments to mitigate and recover from security breaches.
• Toolset Management: Ensure the effective deployment and use of cybersecurity tools and platforms, including SIEM, endpoint protection, vulnerability assessment tools, and threat intelligence feeds, and integration of Stefanini's SAI Cyber Hub platform.
• Security Monitoring: Continuously monitor security systems and alerts to identify and respond to potential threats, utilizing the full range of managed services.
• Policy and Procedure Development: Develop and maintain SOC policies, procedures, and playbooks to ensure a standardized approach to security operations and consistent service delivery.
• Reporting and Metrics: Generate regular reports on security incidents, team performance, and SOC activities, providing insights and recommendations for improvements across all service areas.
• Stakeholder Communication: Liaison between the SOC and other business units, ensuring clear communication of security issues and their impact and the status and performance of the deployed services.
• Continuous Improvement: Stay current with the latest cybersecurity trends and technologies. Implement best practices and innovative solutions to enhance the SOC's capabilities and service offerings.
• SOC Gamification Oversight: Implement and oversee SOC gamification strategies to enhance team engagement, motivation, and continuous skill development. Track and report on gamification metrics and progress.
• Strategic Squad Lab R&D: Execute and manage the day-to-day operations of strategic squad lab research and development initiatives as directed by the Head of Cybersecurity. Ensure alignment with overall security objectives and innovation goals.

Required Skills and Qualifications:

• Experience: At least 5 years in a service delivery role, with at least 7 years in a SOC management position.
• Education: A bachelor’s or master’s degree in computer science, Information Security, or a related field is highly desirable. Relevant certifications such as CISSP, CISM, or CEH are also highly desirable.
• Technical Proficiency: In-depth knowledge of SIEM systems, endpoint security solutions, vulnerability management tools, threat intelligence platforms, incident ticketing systems, knowledge management systems, access management solutions, and asset management tools.
• Leadership Skills: Proven ability to lead, manage, and motivate a team of security professionals.
• Analytical Skills: Strong problem-solving and analytical skills, with the ability to think critically and make informed decisions under pressure.
• Communication Skills: Excellent verbal and written communication skills, with the ability to convey complex security concepts to nontechnical stakeholders.
• Attention to Detail: High level of accuracy and attention to detail in all aspects of work.
• Adaptability: Ability to work in a fast-paced, dynamic environment and adapt to changing priorities and technologies.
• IAM Policies and Procedures Knowledge: Proficient in developing, implementing, and managing policies and procedures related to Identity and Access Management.
• Cloud Experience: Experience with AWS, Azure, or Google Cloud, along with automation capabilities.
• Data Security: Solid understanding of data security principles.
• Generative AI Experience: Experience with generative AI is a plus.

Preferred Qualifications :

• Certifications: CISSP, CISM, CEH, or equivalent certifications.
• Compliance Experience: Familiarity with industry standards and regulations such as NIST 2.0, ISO 27001, NIST 800-53, NIST 800-171, HIPAA, and PCI-DS