Remote SOC Manager

Summary

Join our team as the SOC Manager for WatchGuard's MDR Service and lead the readiness of SOC operations to stay ahead of evolving threats. Drive processes, integration of tools, and innovation within the MDR Service team.

Requirements

• Demonstrable experience in SOC management
• Experience working with Security, Orchestration, Automation, and Response (SOAR) platforms
• In-depth knowledge and experience of managed detection and response involving cloud services and cloud computing, in particular Microsoft 365
• Knowledge of the latest security threats and the tactics, techniques, and procedures used by threat actors
• Experience with the deployment and management of orchestration and automation solutions
• Demonstrable experience with IBM QRadar SIEM is a plus
• Knowledge of incident response, forensics, malware analysis and related tools
• Professional proficiency of English (C1)

Responsibilities

• Oversee daily operations of the SOC team
• Ensure the readiness of the MDR SOC to meet any threats, current or emerging, in the threat landscape
• Propose and champion SOC-driven initiatives to improve upon WatchGuard's MDR Service
• Identify and manage security threats, attack vectors and data source integration, as well as the creation and monitoring of use cases
• Ensure the integrity of customer data sources and their integration with SOC tools
• Define processes and procedures to achieve operational objectives and ensure compliance
• Lead security incident response processes, as well as possible forensic analysis
• Design and inform senior management on key performance indicators of SOC operations
• Ensure the SOC always meets or exceeds the service level agreements for MDR Service customers
• Manage the MDR SOC's relationship and integration with all teams supporting the MDR Service
• Continuously improve MDR SOC process to ensure customer satisfaction
• Promote and assist in orchestration and automation of the MDR SOC's capabilities and integration with MDR Service customers
• Define and promote professional development within the SOC team
• Supervise, provide, and propose training for SOC team members
• Ensure business continuity

Benefits

• Relevant Certifications: ISC2 Certified Information Systems Security Professional (CISSP)
• Relevant Certifications: ISC2 Certified Cloud Security Professional (CCSP)
• Relevant Certifications: CompTIA Advanced Security Practitioner (CASP)
• Relevant Certifications: ISACA Certified Information Security Manage (CISM)
• Relevant Certifications: GIAC Security Leadership (GSLC)
• Relevant Certifications: GIAC Certified Incident Handler (GCIH)