MANAGER - CYBER SECURITY

What Drives Success Key Responsibilities SOC Leadership • Lead enterprise Security Operations Center (SOC) and continuous security monitoring programs. • Manage analysts and ensure effective detection, triage, investigation, escalation, and response. • Drive operational excellence through process improvements, metrics, governance, and maturity initiatives. • Oversee monitoring across cloud, identity, endpoint, network, applications, OT, and SaaS environments. Incident Response & Crisis Management • Lead cyber incident response activities including investigation, containment, eradication, recovery, and lessons learned. • Coordinate with IT, Legal, Compliance, Privacy, and Business teams during major incidents. • Maintain incident response plans, playbooks, escalation procedures, and conduct tabletop exercises. SIEM & Detection Engineering • Own SIEM operations, administration, governance, and platform optimization. • Manage detection use case lifecycle, tuning, validation, and MITRE ATT&CK aligned coverage. • Improve visibility through log onboarding, threat intelligence integration, and detection effectiveness programs. EDR/XDR Operations • Oversee enterprise EDR/XDR monitoring, investigations, and response activities. • Lead containment actions including endpoint isolation, account suspension, credential resets, malware remediation, and IOC blocking. • Ensure endpoint telemetry coverage and continuous enhancement of threat detection capabilities. Data Loss Prevention (DLP) • Manage enterprise DLP operations across endpoints, email, collaboration platforms, cloud applications, and data repositories. • Investigate data protection incidents and drive policy tuning, classification, and governance initiatives. • Ensure compliance with regulatory, privacy, and data protection requirements. Threat Intelligence & Threat Hunting • Operationalize threat intelligence into actionable detections and response strategies. • Lead proactive threat hunting focused on ransomware, insider threats, identity compromise, cloud attacks, and advanced adversary activity. • Convert hunting findings into detections, playbooks, and preventive controls. AI /Automation & Operational Excellence • Drive automation and AI-assisted workflows to improve analyst productivity and response efficiency. • Partner with engineering teams to implement SOAR capabilities and reduce MTTD/MTTR. • Standardize SOPs, runbooks, quality processes, and operational reporting. Leadership & Governance • Lead, mentor, and develop SOC analysts, incident responders, SIEM engineers, and DLP specialists. • Manage cybersecurity vendors, service providers, budgets, and operational performance metrics. • Support audits, compliance assessments, executive reporting, and act as the primary escalation point for cyber defense operations. What We Are Looking For • 15+ years of cybersecurity experience. • 5+ years managing SOC, Incident Response, or Cyber Defense teams. • Experience operating enterprise-scale security monitoring programs. • Proven experience handling major cybersecurity incidents. • Experience leading security transformation and operational maturity initiatives.