Cyber Defense Center Manager

What you'll do

• Lead the cyber incident response process for high-severity incidents from triage to return to service.
• Author and review incident status updates and closure reports for leadership.
• Produce postmortem reports to identify lessons learned and provide actionable recommendations.
• Update and maintain incident response plans, playbooks, and operational procedures.
• Manage and participate in cyber exercises such as table tops and cyber ranges.
• Measure incident response effectiveness using KRI and KPI metrics.
• Train and mentor SOC personnel to improve team capabilities.
• Drive knowledge sharing and growth across the Cyber Fusion Center.

What we're looking for

• Bachelor's or Master’s in Cyber Security, Information Technology, or Computer Science, or relevant industry experience.
• CISSP, CEH, OSCP, OSCE, GCIH, or an applicable certification in the security field.
• 5+ years of experience in a cyber security management role.
• Experience managing a team of SOC analysts.
• Experience leading a team of analysts investigating and managing major or complex cyber incidents end to end.
• Experience writing detailed cybersecurity reports, including lessons learned.
• Strong communication skills with experience communicating to an executive audience.
• Knowledge of adversarial TTPs and industry standard frameworks like NIST and Mitre ATT&CK.
• Strong working knowledge of security technologies including SIEM, EDR/EPP, AV, ID/PS, HIPS, Web Proxy, AD, PKI, and DNS.
• Financial Services experience (preferred).