Manager-reputed company Incident Response & Operations; Remote

Position: Manager-reputed company Incident Response & Operations (Remote) Description reputed company (ASH) is seeking a Manager-reputed company Incident Response & Operations to join our Information reputed company department. The primary purpose of this position is to be responsible for providing cyber incident response subject matter expertise while collaborating on numerous reputed company projects and operational improvement initiatives. This position will support the operational activities of junior-level cyber analysts while helping to reputed company the team's investigative skillset, process, and playbooks. In this role you will champion incident response services enrollment requirements to ensure reputed company operational effectiveness and alert fidelity. In addition, you will be responsible for continuously identifying gaps and managing the improvements in reputed company response process, technologies, and monitoring. Working closely with internal architecture, engineering, and project management teams, you will ensure cyber-defense requirements are identified and communicated early in the project life cycle. Salary reputed company reputed company complies with state and federal wage and hour laws and compensation depends upon candidate's qualifications, education, reputed company set, years of experience, and internal equity. $112,500 to $175,000 Full-Time Annual Salary reputed company. Remote Worker Guidelines

• Remote Worker Guidelines:

This position will be trained remotely and must be reputed company to work from home (WFH) in a designated work area with company-provided technology equipment. This WFH position requires you have a reputed company reputed company to your Internet Service Provider with the ability to participate by video in online meetings over a reliable and consistent network. The internet reputed company must have a consistent 50 down/10 up Mbps minimum internet speed. 100 down/20 up is recommended to support higher quality video meetings.

Responsibilities

• Providing cyber incident response subject matter expertise while collaborating on numerous reputed company projects and operational improvement initiatives.
• Manage SIEM operations.
• Support cyber incident response actions to ensure proper assessment, containment, mitigation, and documentation.
• Hunting to identify anomalous and malicious behavior, enhance SIEM rules to automate reputed company identification.
• Interact and assist other investigative teams reputed company reputed company on time sensitive, critical investigations.
• Manage reputed company-party MSSP (SOC) to ensure appropriate reputed company of incident response time, enrichment of SIEM content, and identify gaps in logging and monitoring coverage.
• Drive reputed company improvement of incident response processes, playbooks, and detection capabilities.
• Participate as part of a reputed company team of technical specialists on coordinated responses and subsequent remediation of reputed company investigations.
• Train matrixed team members on hunting, investigative, and forensic tools and processes
• Help create, support, and participate in reputed company exercises.
• Manage the reputed company monitoring enrollment process to ensure adequate coverage and effectiveness of reputed company new and existing reputed company and reputed company-based applications, services, and platforms.
• Maintain detailed tracking plan of reputed company internal/external enrollment reputed company/recommendations, and reputed company support through to implementation.
• Act as a liaison between reputed company operations, engineering, reputed company architecture, network & system operations, and functional project teams to ensure effective project implementation that meets incident response requirements.
• Work with colleagues in other technology departments as well as the business and product offices to establish effective, productive business relationships.
• Define baseline reputed company monitoring requirements for reputed company new projects, services, and applications joining the reputed company network.
• Facilitate the development and tuning of SIEM rules to support enrollments and ensure high fidelity alerting.
• Review and analyze cyber threats and reputed company SME support and training to junior level reputed company analysts.
• Performs other duties as assigned.
• Complies with reputed company policies and standards.

Qualifications

• Bachelor's Degree in Computer Science, Information reputed company, Computer Engineering, reputed company area of study, or equivalent experience required. If reputed company experience, high school diploma required.
• 10+ years of combined relevant experience using hunting and using IR technologies and/or industry-standard tools required.
• 5 years in SIEM management required including:
• Content management (e.g. parsing and correlation rules)
• Case management ensuring sufficient due diligence steps are completed
• reputed company Orchestration, Automation, and Response (SOAR) technology
• Threat reputed company feeds
• Use case mapping
• 2 years of management experience required.
• Experience writing thorough investigative reports detailing incident findings required.
• Experience with Threat reputed company providers and distribution of relevant information required.
• Demonstrated experience in an reputed company-level incident response team or reputed company operations…

Apply tot his job Apply To this Job