Assistant Vice President

Position Title: Threat Detection & Response, SOC Manager

Corporate Title: Vice President

In this role you will focus on researching threats posed by cyber criminals to various systems, technologies, operations, and programs, and analyzing research to determine a cyber criminal's capabilities, intentions, and attack approaches, including those with multiple phases. Responsibilities include rapidly responding to incidents to minimize risk exposure and ensure system availability; Manage SOC 24x7 operations including technology and people management.

Support inquiries from compliance teams such as IT risk management and internal and external audit, to ensure documentation is complete and in compliance with information security policies

Manage development of security operations playbooks to ensure threat detection, monitoring, response, and forensics activities align with best practices, minimize gaps in detection and response, and provide comprehensive mitigation of threats.

Create, Enhance, and manage security use cases, dashboards and alerts using Splunk.

Bachelor's Degree in Business, Management, Computer Sciences, or equivalent prior work experience in a related field

Minimum of 10 years overall experience working in global, complex, matrix-managed organization

Minimum of 5 years of people management experience is preferred.

Minimum of 8 years' experience in either:

Threat detection & response and/or vulnerability management

Cybersecurity Operations or Information Security

Minimum of 3 years working directly in Cybersecurity Operations or Threat and Vulnerability management.

Experience across the following technical concentrations:

Network-Based Security Controls (Firewall, IPS, WAF, MDS, Proxy, VPN)

Host and Network Forensics

Web Applications and Traffic

Experienced with EnCase, FTK, SIFT, Splunk, Redline, Volatility, WireShark, TCPDump, and open- source forensic tools.

Experience responding to cyber events in public cloud environments such as AWS, Azure, Google Cloud, etc.

Experience creating trending, metrics, and management reports.

Security experience in all phases of product and service development lifecycle including architecture, design, development, testing, release, and operational maintenance.

Experience with cloud computing security, network, operating system, database, application, and mobile device security.

Extensive knowledge of vulnerability management and remediation.

Experience with information security risk management, including conducting information security audits, reviews, and risk assessments.

Experience in two or more security domains including Security Governance and Oversight, Security

Risk Management, Network Security, Threat and Vulnerability Management, and Incident Response and Forensics.

Strong time management skills to balance multiple activities and lead junior analysts as needed

A diverse skill base in both product security and information security including organizational structure and administration practices, system development and maintenance procedures, system software and hardware security controls, access controls, computer operations, physical and environmental controls, and backup and recovery procedures.

Detailed knowledge and experience in security and regulatory frameworks (ISO 27001, NIST 800 series, FFIEC, SOC2, FedRAMP, STAR, etc.)

Security Risk Management, Network Security, Threat and Vulnerability Management, and Incident Response and Forensics"

Knowledge of Splunk, Phantom, Python, CrowdStrike, Tanium, Defender, Azure, AWS and forensic security tools is preferred.

Experience working within the Financial Services Industry preferred.

One to three years of experience in Splunk, Splunk Enterprise Security or Splunk Phantom is preferred

technical and non-technical problem solving skills).

Maintain certifications in an information security related field. Splunk Certifications.

---